Hi Anthony, > Part of EFAIL was that the mail client downloaded bits from the > Internet and interleaved them seamlessly into the message.
IIRC it was that different adjacent parts were catenated if both text/html before being sent to something to interpret the HTML. This meant the join could produce something unwanted that wasn't detected when they were separate. > Ralph Corderoy's message contains a 'Content-Type: > message/external-body; access-type="url"; url="..."' bit that was > promptly fetched and displayed in the middle of the message. About time someone's noticed. :-) It's not the first time, though it's not common. This time it seemed apt given my pondering about too much done `out of the box'. > How do I disable this behavior Possibly by nobbling nmh-access-url in an mhn.defaults, e.g. /etc/nmh, though I haven't tested it. It's `curl -L' here, that should probably have an `-sS' too. > and why does nmh have it turned ON by default!? I don't know. History, probably. We used to assume everyone played nice. -- Cheers, Ralph. https://plus.google.com/+RalphCorderoy -- nmh-workers https://lists.nongnu.org/mailman/listinfo/nmh-workers
