[Top][All Lists]

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Nmh-workers] masquerade settings & spost

From: Earl Hood
Subject: Re: [Nmh-workers] masquerade settings & spost
Date: Tue, 7 Feb 2012 12:06:29 -0600

On Tue, Feb 7, 2012 at 11:46 AM, Joel Uckelman wrote:

> My suggestion, then, is this: Could we both have some indication that
> the input is bad, *and* have nmh make an attempt at interpreting it?


You can already invoke show to disable MIME processing, so
when you encounter such a message, just do:

  show -noshowproc | less

or, if you want headers to still be processed nicely:

  show -noshowproc | mhl

You start increasing the risk of security vulnerabilities when
"interpreting" malformed data.  Any wrong interpretation could
lead to an attacker compromising your system with a specially
crafted message.

At the most, nmh could fallback to just rendering the message
through mhl if there is MIME error if you do not want to
do one of the commands above yourself, but I think that is
the most nmh should do.


reply via email to

[Prev in Thread] Current Thread [Next in Thread]