Breaking MIME concatenation

Werner Koch wk at gnupg.org
Thu May 17 09:59:18 CEST 2018


On Thu, 17 May 2018 01:39, mirimir at riseup.net said:

> However, I get that many users expect HTML, embedded images and links.

Well they expect a bit of markup like *bold* or _underlined_ or
/italics/ and links like https://gnupg.org but any decent MUA already
supports this for plain text mails.  Proper GUI based MUAs also support
inline images (which are part of MIME); I used such MUAs already in in
the mid 90ies.

I doubt that mail is the right thing to employ fancy CSS stuff, though.

> So the best solution would be a tweak to GnuPG that breaks HTML and
> embedded remote content. That would protect against Efail, no matter how

gpg will nver touch the payload.  If MUAs want to sanitize HTML, I won't
have a problem with that.


Shalom-Salam,

   Werner

-- 
#  Please read:  Daniel Ellsberg - The Doomsday Machine  #
Die Gedanken sind frei.  Ausnahmen regelt ein Bundesgesetz.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 227 bytes
Desc: not available
URL: <https://lists.gnupg.org/pipermail/gnupg-users/attachments/20180517/9a4e4b1f/attachment.sig>


More information about the Gnupg-users mailing list