Hacker News new | ask | show | jobs
by Sniffnoy 2957 days ago
So in short, if you have all mails set to display as plain text rather than HTML, there's no problem?
2 comments

to quote the letter:

There are two ways to mitigate this attack

- Don't use HTML mails. Or if you really need to read them use a proper MIME parser and disallow any access to external links.

- Use authenticated encryption.

Like every sane person should do.
That ship sailed when email got named email instead of etelegram.
Why do you think so? People are not forced to use HTML mails. I don't.
Oh, I thought you were making the "email should only be text" argument, not the "you should avoid looking at the non-text part of multipart email" argument. I was addressing the former.
I'm stealing etelegram for a new startup I'm going to make
Aren't telegrams already "e"?