Re: [Imap-protocol] Registration of keyword which enables fetching external images

Neil Hunsperger <[email protected]> Fri, 15 May 2015 16:18:56 -0700
Newsgroups gmane.mail.imap.general
Message-ID <14D026C7F297AD44AC82578DD818CDD047B37C34E0@TUS1XCHEVSPIN35.SYMC.SYMANTEC.COM>
Hi Jan,

> This is done
> for privacy reasons so that we don't leak information about the recipient
> by accident. However, once a request to a given external URL has been made,
> the privacy issue doesn't matter anymore (the information has leaked
> already). It is therefore typically safe to make this per-message setting
> permanent

Additional requests may leak additional information. Examples:

* I've viewed an offer letter 10 times and thus may be interested enough to be squeezed for more money.
* I was paging through last week's email to find something and my MUA downloads external images from "politically-sensitive-topic.org" while I'm now travelling overseas in a country where that topic is illegal.
* I allowed downloading linked images from my desktop MUA and now my other devices respect that setting, exposing information on the complete set of MUA software I use and the region I'm currently in.

-Neil
_______________________________________________
Imap-protocol mailing list
[email protected]
http://mailman13.u.washington.edu/mailman/listinfo/imap-protocol