GNU bug report logs - #58171
29.0.50; Change gnus-user-agent to nil by default

Previous Next

Package: emacs;

Reported by: Stefan Kangas <stefankangas <at> gmail.com>

Date: Thu, 29 Sep 2022 16:46:02 UTC

Severity: wishlist

Tags: wontfix

Found in version 29.0.50

Done: Lars Ingebrigtsen <larsi <at> gnus.org>

Bug is archived. No further changes may be made.

Full log


View this message in rfc822 format

From: Stefan Kangas <stefankangas <at> gmail.com>
To: 58171 <at> debbugs.gnu.org
Subject: bug#58171: 29.0.50; Change gnus-user-agent to nil by default
Date: Thu, 29 Sep 2022 09:45:21 -0700
Severity: wishlist

This is a proposal to set `gnus-user-agent' to non-nil by default.

To save some typing, I'll just quote what Daniel Kahn Gillmor said when
they made this change in notmuch back in 2016:

> The User-Agent: header can be fun and interesting, but it also leaks
> quite a bit of information about the user and their software stack.
>
> This represents a potential security risk (attackers can target the
> particular stack) and also an anonymity risk (a user trying to
> preserve their anonymity by sending mail from a non-associated account
> might reveal quite a lot of information if their choice of mail user
> agent is exposed).
>
> It makes sense to have safer defaults.

https://notmuchmail.org/pipermail/notmuch/2016/022789.html




This bug report was last modified 2 years and 265 days ago.

Previous Next


GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.