We shall value email usage

Klaus Ethgen klaus+gnupg at ethgen.ch
Thu Mar 25 12:34:15 CET 2021


Am Do den 25. Mär 2021 um 11:51 schrieb Bernhard Reiter:
> To me the protected headers implementation Thunderbird is a step back,
> as it leads to unnecessary data leaks (subject and cc) to other clients
> with are OpenPGP/MIME compatible.

Well, there is other..

For example, if you start editing a mail with thunderbird and put it to
drafts. Then finishing the edit with mutt. This will leak the following
- user-agent
- x-mailer
- x-mozilla-draft-info
- x-enigmail-draft-status
- x-account-key
- x-identity-key
- fcc

Even when sending mails just from thunderbird, it leaks at least the
user-agent header.

Currently I configured my MTA to remove that headers for outgoing mails.

Klaus Ethgen                                       http://www.ethgen.ch/
pub  4096R/4E20AF1C 2011-05-16            Klaus Ethgen <Klaus at Ethgen.ch>
Fingerprint: 85D4 CA42 952C 949B 1753  62B3 79D0 B06F 4E20 AF1C
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 688 bytes
Desc: not available
URL: <https://lists.gnupg.org/pipermail/gnupg-users/attachments/20210325/cd9c20b5/attachment.sig>

More information about the Gnupg-users mailing list