Re: notmuch-mutt: support for duplicate message removal

diff --git a/b8/1f7b07c4226605925907e8f2addad641901934 b/b8/1f7b07c4226605925907e8f2addad641901934
new file mode 100644 (file)
index 0000000..862e164
--- /dev/null
+++ b/b8/1f7b07c4226605925907e8f2addad641901934
@@ -0,0 +1,100 @@
+Return-Path: <jani@nikula.org>\r
+X-Original-To: notmuch@notmuchmail.org\r
+Delivered-To: notmuch@notmuchmail.org\r
+Received: from localhost (localhost [127.0.0.1])\r
+       by olra.theworths.org (Postfix) with ESMTP id 5DF4C431FAF\r
+       for <notmuch@notmuchmail.org>; Wed,  1 Aug 2012 12:19:03 -0700 (PDT)\r
+X-Virus-Scanned: Debian amavisd-new at olra.theworths.org\r
+X-Spam-Flag: NO\r
+X-Spam-Score: -0.7\r
+X-Spam-Level: \r
+X-Spam-Status: No, score=-0.7 tagged_above=-999 required=5\r
+       tests=[RCVD_IN_DNSWL_LOW=-0.7] autolearn=disabled\r
+Received: from olra.theworths.org ([127.0.0.1])\r
+       by localhost (olra.theworths.org [127.0.0.1]) (amavisd-new, port 10024)\r
+       with ESMTP id HlTdVasCbM0L for <notmuch@notmuchmail.org>;\r
+       Wed,  1 Aug 2012 12:19:02 -0700 (PDT)\r
+Received: from mail-lb0-f181.google.com (mail-lb0-f181.google.com\r
+       [209.85.217.181]) (using TLSv1 with cipher RC4-SHA (128/128 bits))\r
+       (No client certificate requested)\r
+       by olra.theworths.org (Postfix) with ESMTPS id 85CC4431FAE\r
+       for <notmuch@notmuchmail.org>; Wed,  1 Aug 2012 12:19:02 -0700 (PDT)\r
+Received: by lbbgk8 with SMTP id gk8so593899lbb.26\r
+       for <notmuch@notmuchmail.org>; Wed, 01 Aug 2012 12:18:59 -0700 (PDT)\r
+X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;\r
+       d=google.com; s=20120113;\r
+       h=from:to:cc:subject:in-reply-to:references:user-agent:date\r
+       :message-id:mime-version:content-type:x-gm-message-state;\r
+       bh=NKpyuSAEuPXitSPU36jjhcDVAGN7Gi1xE6DoP9MS0+8=;\r
+       b=nXZqt7qOFyjtOhiJqOMFqVDR5aWzhA7DonlAA030A1PY/0HPbUQLgVBp9i7TOrVIGj\r
+       +igCQFvQBZWZAJChD71iMtz3/X1KbOn1z+P4AH+8xwJs5DMy4T7DC9lmnCiQr4Dj5Nq+\r
+       SfKzOc/6BbiFB920Nv7UK0qbvFj89dCqx2H5kuosniV/3BFxwzxbHUFBPbflsh3IJvdI\r
+       Jzyxo8dNCjktN1sZBq/1uu9Pldbtb3X5RkczUQLS3drTP33wYClFkly2zv9bkEcgE013\r
+       p6dcRt3kSsBZ9Nml5N6TSTN1O3G9h2PPWfD+TIcGdYt4P5HYlDW2u5U2GEf43ALwbGRU\r
+       /CQA==\r
+Received: by 10.112.102.8 with SMTP id fk8mr8302241lbb.71.1343848739430;\r
+       Wed, 01 Aug 2012 12:18:59 -0700 (PDT)\r
+Received: from localhost (dsl-hkibrasgw4-fe51df00-27.dhcp.inet.fi.\r
+       [80.223.81.27])\r
+       by mx.google.com with ESMTPS id gv8sm3691440lab.14.2012.08.01.12.18.57\r
+       (version=SSLv3 cipher=OTHER); Wed, 01 Aug 2012 12:18:58 -0700 (PDT)\r
+From: Jani Nikula <jani@nikula.org>\r
+To: Daniel Kahn Gillmor <dkg@fifthhorseman.net>,\r
+       Andrei POPESCU <andreimpopescu@gmail.com>\r
+Subject: Re: notmuch-mutt: support for duplicate message removal\r
+In-Reply-To: <50196548.3030504@fifthhorseman.net>\r
+References: <1343808582-9519-1-git-send-email-zack@upsilon.cc>\r
+       <87pq7aam8n.fsf@nikula.org> <20120801162605.GA6012@sid.nuvreauspam>\r
+       <50196548.3030504@fifthhorseman.net>\r
+User-Agent: Notmuch/0.13.2+104~gaee3080 (http://notmuchmail.org) Emacs/23.3.1\r
+       (i686-pc-linux-gnu)\r
+Date: Wed, 01 Aug 2012 22:18:55 +0300\r
+Message-ID: <87d33av2sg.fsf@nikula.org>\r
+MIME-Version: 1.0\r
+Content-Type: text/plain; charset=us-ascii\r
+X-Gm-Message-State:\r
+ ALoCoQlo8yvbNQrsAOmJ2L1eObazV1kw8zWgcQTkSTaT7wH+pkl3RaDwRB7KprU+dxMsA8+HI4Uj\r
+Cc: notmuch@notmuchmail.org, "Kevin J. McCarthy" <kevin@8t8.us>,\r
+       Stefano Zacchiroli <zack@upsilon.cc>\r
+X-BeenThere: notmuch@notmuchmail.org\r
+X-Mailman-Version: 2.1.13\r
+Precedence: list\r
+List-Id: "Use and development of the notmuch mail system."\r
+       <notmuch.notmuchmail.org>\r
+List-Unsubscribe: <http://notmuchmail.org/mailman/options/notmuch>,\r
+       <mailto:notmuch-request@notmuchmail.org?subject=unsubscribe>\r
+List-Archive: <http://notmuchmail.org/pipermail/notmuch>\r
+List-Post: <mailto:notmuch@notmuchmail.org>\r
+List-Help: <mailto:notmuch-request@notmuchmail.org?subject=help>\r
+List-Subscribe: <http://notmuchmail.org/mailman/listinfo/notmuch>,\r
+       <mailto:notmuch-request@notmuchmail.org?subject=subscribe>\r
+X-List-Received-Date: Wed, 01 Aug 2012 19:19:03 -0000\r
+\r
+On Wed, 01 Aug 2012, Daniel Kahn Gillmor <dkg@fifthhorseman.net> wrote:\r
+> On 08/01/2012 12:26 PM, Andrei POPESCU wrote:\r
+>> I'm at least one user that cares enough about the distinction to have \r
+>> all list mails received via a different address, just to avoid Gmail's \r
+>> "feature" of silently dropping my own messages received via a list. \r
+>> IMVHO it should at least be configurable...\r
+>\r
+> The proposed feature could also exacerbate the previously-discussed\r
+> attack vector [0] whereby a malicious Message-ID collision can be used\r
+> to hide messages from the victim's mailstore.\r
+\r
+Just to clarify, the feature proposed in this patch series does not make\r
+the problem worse (as it would hide only fully identical messages, which\r
+is not useful for the malicious purpose).\r
+\r
+What I suggested [1] could indeed make notmuch-mutt as vulnerable to the\r
+attack vector as notmuch show, and the emacs ui, currently are (but not\r
+worse than that).\r
+\r
+BR,\r
+Jani.\r
+\r
+[1] id:"87pq7aam8n.fsf@nikula.org"\r
+\r
+>\r
+>      --dkg\r
+>\r
+> [0] id:87k42vrqve.fsf@pip.fifthhorseman.net\r