5 messages in net.sourceforge.lists.courier-sqwebmailRe: [sqwebmail] X-Face patch for sqwe...
FromSent OnAttachments
Milan ObuchDec 21, 2007 4:46 am.c
Milan ObuchDec 21, 2007 4:47 am 
Sam VarshavchikDec 21, 2007 5:24 pm 
Milan ObuchDec 22, 2007 12:46 am 
Sam VarshavchikDec 22, 2007 7:05 am 
Actions with this message:
Paste this link in email or IM:
Paste this link in email or IM:
Atom feed for this thread
Paste this URL into your reader:
Subject:Re: [sqwebmail] X-Face patch for sqwebmailActions...
From:Sam Varshavchik (mrs@courier-mta.com)
Date:Dec 21, 2007 5:24:27 pm
List:net.sourceforge.lists.courier-sqwebmail

Milan Obuch writes:

Hi, today I played a bit with X-Face header and a patch for sqwebmail has bee created. It turns out to be actually simple and not too hard to create after I did some digging in the code. It is not yet in final shape, but it works, is usable as a proof of concept. I use external X-Face convertor for this, publicly available. I would like to get feedback on this.

Ugh, there's a reason why sqwebmail refuses to display images on external web sites that are linked from HTML mail. And that's exactly what this does.

There's just no fundamental way to do this with complete security, unless sqwebmail itself downloads the image via HTTP, and has complete control of the HTTP headers in the image request. It's fine to do this in standalone mail or news clients, but this is a completely different situation here.

And even with standalone clients there are still some potential problems here, with revealing one's IP address, should this web site get hacked.