In message <mailman.3786.1431050203.12477.nanog@nanog.org>, Paul Ferguson via N ANOG writes:
Does anyone any else find it weird that the last dozen or so messages from the list have been .eml attachments?
Nanog is encapsulating messages that are DKIM signed. Your mailer may not be properly handling Content-Type: message/rfc822 Content-Disposition: inline Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: marka@isc.org
Ah. Security hole as designed. inline dispositions should be ignored unless the recipient specifically "requests" to see them after viewing the text/plain part. In fact, I would vote for ignoring *everything* except the text/plain part unless the recipient specifically requests it after viewing the text/plain part. No test/plain? Delete without further ado.
-----Original Message----- From: NANOG [mailto:nanog-bounces@nanog.org] On Behalf Of Mark Andrews Sent: Friday, 8 May, 2015 00:39 To: Paul Ferguson Cc: NANOG Subject:
In message <mailman.3786.1431050203.12477.nanog@nanog.org>, Paul Ferguson via N ANOG writes:
Does anyone any else find it weird that the last dozen or so messages from the list have been .eml attachments?
Nanog is encapsulating messages that are DKIM signed. Your mailer may not be properly handling
Content-Type: message/rfc822 Content-Disposition: inline
Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: marka@isc.org
On 05/09/2015 08:17 AM, Jim Popovitch wrote:
On Sat, May 9, 2015 at 11:05 AM, Keith Medcalf <kmedcalf@dessus.com> wrote:
No test/plain? Delete without further ado.
In the past year or so it seems that all RAA Verification emails, or at least the ones I see, contain no plain text. :-(
-Jim P.
I'm surprised. I have set Thunderbird to view messages in plain text only. I get a number of messages that have only one line: "Please view this email in your browser." Right. (My brother doesn't like this. He's a process chemist, so he needs to use HTML mail to send most business traffic so that formulas and equations are sent properly. I had to remove my HTML-only filter in order to receive his e-mails. Then he set up a GMail account because others were also filtering on HTML-only. Go figure. Before you ask, I have not put that filter back...)
On Saturday, 9 May, 2015, at 10:59 John Levine <johnl@iecc.com> said:
No test/plain? Delete without further ado.
Sadly, it is no longer 1998.
No kidding. Web-Page e-mail. Lots of proprietary executable-embedded-in-data file formats used for e-mail, and worst, gratuitous JavaScript everywhere making the Web unuseable unless you disable all security (or just refuse to deal with the schmucks that do that).
R's, John
participants (5)
-
Jim Popovitch -
John Levine -
Keith Medcalf -
Mark Andrews -
Stephen Satchell