Re: [PATCH v2] Omit User-Agent: header by default

Subject: Re: [PATCH v2] Omit User-Agent: header by default

Date: Tue, 09 Aug 2016 11:28:44 -0400

To: Gaute Hope, Notmuch Mail

Cc:

From: Daniel Kahn Gillmor


On Tue 2016-08-09 02:02:49 -0400, Gaute Hope wrote:
> Daniel Kahn Gillmor writes on august 9, 2016 1:35:
>> The User-Agent: header can be fun and interesting, but it also leaks
>> quite a bit of information about the user and their software stack.
>
> Is the message-id generated by gnus or notmuch-emacs? I could not find
> the relevant code. I noticed it has an *.fsf@* part as well as the,
> probably customizable, local FQDN.

agreed, this is another metadata leak that we should fix, but i don't
think it needs to be conflated with this one.

does anyone know of a useful standard for message-id generation that
would put gnus/notmuch-emacs/mml users into a larger anonymity set?

      --dkg
signature.asc (application/pgp-signature)

Thread: