3 ms·
Even setting aside that this is an excellent example of how toxic the security community is, the real problem here is that HTML email is a steaming pile of crap
by Sir_Cmpwn 8y ago
Even setting aside that this is an excellent example of how toxic the security community is, the real problem here is that HTML email is a steaming pile of crap. The number of vulnerabilities introducted by the mind bogglingly stupid idea of putting HTML in emails is staggering. You're better off only reading plaintext emails and sending the rest to /dev/null. Bonus: this gets a good deal of spam out of your inbox!
- colemannugent 8y agoYeah, whoever thought that adding the attack/bug surface of a browser to the email client should be publicly shamed. I assume that aerc like mutt is not affected by this "vulnerability"?
- Tyr42 8y agoYeah, mutt is safe https://pbs.twimg.com/media/DdJ_d_wWsAEclUs.jpg:large https://pbs.twimg.com/media/DdJ_d_wWsAEclUs.jpg:large
- dmix 8y agoAnd the K-9 app seems safe which is the most popular way to use PGP on Android.
- e12e 8y agoIf true, that's great news. There are plenty of decent cli/desktop clients that make it easy to avoid html mail. Not so for Android, where apps seem likely to wrap some rich content control in order to render text (as html).
- Sir_Cmpwn 8y agoAye.