From: Aaron Ecay <aaronecay@gmail.com>
To: Pieter Praet <pieter@praet.org>, Austin Clements <amdragon@MIT.EDU>
Subject: Re: [PATCH] emacs: Quote MML tags in replies
In-Reply-To: <87obtzuvmj.fsf@praet.org>
References: <1326998589-37187-1-git-send-email-aaronecay@gmail.com>
	<20120119224842.GS16740@mit.edu>
	<m2vco72tf3.fsf@wal122.wireless-pennnet.upenn.edu>
	<87obtzuvmj.fsf@praet.org>
User-Agent: Notmuch/0.11+73~gd51b784 (http://notmuchmail.org) Emacs/24.0.92.2
	(i386-apple-darwin10.8.0)
Date: Thu, 19 Jan 2012 22:26:02 -0500
Message-ID: <m2sjjb2gxh.fsf@wal122.wireless-pennnet.upenn.edu>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
Cc: notmuch@notmuchmail.org
Precedence: list

On Fri, 20 Jan 2012 00:21:08 +0100, Pieter Praet <pieter@praet.org> wrote:
> So, would I be right to assume MML tags in signatures are never
> evaluated to begin with?  Otherwise, there would still be a security
> hole, no?

I am thinking of MML tags that a user puts in their own signature.
If that case is a security hole, then the hole is in the user=E2=80=99s bra=
in
and not in notmuch.  :)

--=20
Aaron Ecay