Hacker News Reader

So in short, if you have all mails set to display as plain text rather than HTML, there's no problem?

to quote the letter:

There are two ways to mitigate this attack

- Don't use HTML mails. Or if you really need to read them use a proper MIME parser and disallow any access to external links.

- Use authenticated encryption.

Like every sane person should do.

That ship sailed when email got named email instead of etelegram.

I'm stealing etelegram for a new startup I'm going to make

Aren't telegrams already "e"?

Why do you think so? People are not forced to use HTML mails. I don't.

Oh, I thought you were making the "email should only be text" argument, not the "you should avoid looking at the non-text part of multipart email" argument. I was addressing the former.

Reply on news.ycombinator.com