From: Pieter Praet <pieter@praet.org>
To: Aaron Ecay <aaronecay@gmail.com>, Austin Clements <amdragon@MIT.EDU>
Subject: Re: [PATCH] emacs: Quote MML tags in replies
In-Reply-To: <m2sjjb2gxh.fsf@wal122.wireless-pennnet.upenn.edu>
References: <1326998589-37187-1-git-send-email-aaronecay@gmail.com>
	<20120119224842.GS16740@mit.edu>
	<m2vco72tf3.fsf@wal122.wireless-pennnet.upenn.edu>
	<87obtzuvmj.fsf@praet.org>
	<m2sjjb2gxh.fsf@wal122.wireless-pennnet.upenn.edu>
User-Agent: Notmuch/0.11+101~g94bf862 (http://notmuchmail.org) Emacs/23.3.1
	(x86_64-unknown-linux-gnu)
Date: Sun, 22 Jan 2012 07:39:03 +0100
Message-ID: <87sjj844xk.fsf@praet.org>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
Cc: notmuch@notmuchmail.org
Precedence: list

On Thu, 19 Jan 2012 22:26:02 -0500, Aaron Ecay <aaronecay@gmail.com> wrote:
> On Fri, 20 Jan 2012 00:21:08 +0100, Pieter Praet <pieter@praet.org> wrote:
> > So, would I be right to assume MML tags in signatures are never
> > evaluated to begin with?  Otherwise, there would still be a security
> > hole, no?
>=20
> I am thinking of MML tags that a user puts in their own signature.
> If that case is a security hole, then the hole is in the user=E2=80=99s b=
rain
> and not in notmuch.  :)
>=20

Ah, right...  I didn't bother checking what the mark's position would be,
so assumed we were talking about the signature in the *quoted* message.

Won't happen again :)

> --=20
> Aaron Ecay


Peace

--=20
Pieter