Discussion:
PGP/MIME without MML, or is MML unobjectionable?
(too old to reply)
Lasse Kliemann
2014-12-11 22:28:53 UTC
Permalink
Is there any (usable) implementation for sending PGP/MIME e-mail using Emacs, without using MML (MIME Meta Language)? All I have seen so far relies on MML to express the MIME structure of the message.

I was wondering: isn't MML a security risk? What if I quote text from the e-mail which I'm replying to, and that text contains MML markup, placed there by the sender of the mail? Couldn't that cause interference? Has anyone thought about that before?

Thanks!
Tim Landscheidt
2014-12-12 01:53:46 UTC
Permalink
Post by Lasse Kliemann
Is there any (usable) implementation for sending PGP/MIME
e-mail using Emacs, without using MML (MIME Meta Language)?
All I have seen so far relies on MML to express the MIME
structure of the message.
I was wondering: isn't MML a security risk? What if I quote
text from the e-mail which I'm replying to, and that text
contains MML markup, placed there by the sender of the mail?
Couldn't that cause interference? Has anyone thought about
that before?
If you quote a mail, at least Gnus properly escapes MML tags
("<#part" => "<#!part").

Tim

Loading...