Ah. Security hole as designed. inline dispositions should be ignored unless the recipient specifically "requests" to see them after viewing the text/plain part. In fact, I would vote for ignoring *everything* except the text/plain part unless the recipient specifically requests it after viewing the text/plain part. No test/plain? Delete without further ado.
> -----Original Message----- > From: NANOG [mailto:nanog-boun...@nanog.org] On Behalf Of Mark Andrews > Sent: Friday, 8 May, 2015 00:39 > To: Paul Ferguson > Cc: NANOG > Subject: > > > In message <mailman.3786.1431050203.12477.na...@nanog.org>, Paul Ferguson > via N > ANOG writes: > > > > Does anyone any else find it weird that the last dozen or so messages > > from the list have been .eml attachments? > > Nanog is encapsulating messages that are DKIM signed. Your mailer may > not be properly handling > > Content-Type: message/rfc822 > Content-Disposition: inline > > Mark > -- > Mark Andrews, ISC > 1 Seymour St., Dundas Valley, NSW 2117, Australia > PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org
