1 |
On 03/18/2013 08:15 PM, Kevin Chadwick wrote: |
2 |
> On Mon, 18 Mar 2013 23:38:11 +0000 |
3 |
> Neil Bothwick <neil@××××××××××.uk> wrote: |
4 |
> |
5 |
>>>> K9 Mail can do both plain text and bottom posting. |
6 |
>>>> Both set in Account settings/Sending mail. |
7 |
>>> |
8 |
>>> It can write but forces html onto users, which potentially includes |
9 |
>>> jpg exploits, png exploits, html exploits, script exploits, font |
10 |
>>> exploits... |
11 |
>> |
12 |
>> What are you talking about? K9 forces HTML on no one, it sends plain |
13 |
>> text if you set it to do so. |
14 |
>> |
15 |
> |
16 |
> If you receive a html email you have no choice but to execute code to |
17 |
> handle as per my above examples. |
18 |
|
19 |
Either you ignored what I said about being able to disable loading |
20 |
remote content and being able to disable showing inline rich content, or |
21 |
you're seriously concerned about HTML parser vulnerabilities. |
22 |
|
23 |
If that's the case, set up a defanging filter for your email. |
24 |
|
25 |
> |
26 |
>>> Having knocked Android, I haven't found the time to try the latest |
27 |
>>> native email app. I'm not expecting a no html option but I'm pretty |
28 |
>>> sure it will have some major pluses over k9mail, which was a trade |
29 |
>>> of good for bad on Gingerbread. |
30 |
>> |
31 |
>> K9 is not Android, any more than yourfavouriteemailer is Linux. It is |
32 |
>> a program that runs on Android. As for being less capable than the |
33 |
>> native app, the opposite is the case as it is based on the code from |
34 |
>> the native app, but actively developed. |
35 |
> |
36 |
> Googles mail is part of android and they do maintain it. I maintain |
37 |
> that while k9 has some improvements it also breaks things and I guess |
38 |
> would have not seen light without Googles initial efforts. |
39 |
|
40 |
I'm really not sure what Google's native client (or K9) breaks. I use K9 |
41 |
because I require GPG support for communicating with one of my clients. |