From mboxrd@z Thu Jan  1 00:00:00 1970
From: andrey mirtchovski <mirtchov@cpsc.ucalgary.ca>
To: 9fans@cse.psu.edu
Subject: Re: [9fans] cryptographic signatures & factotum
In-Reply-To: <559b5ec89e2cfd991a8152e0ceddc88c@snellwilcox.com>
Message-ID: <Pine.LNX.4.44.0403111638430.6373-100000@fbsd.cpsc.ucalgary.ca>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Date: Thu, 11 Mar 2004 16:41:16 -0700
Topicbox-Message-UUID: 2b32a068-eacd-11e9-9e20-41e7f4b1d025

you've looked at pipeto, right? you can easily embed relevant auth info in
the header or subject line and catch it in pipeto. people have done it lots
with procmail.

what really worries me is that htmlfmt is executed for each HTML email
that is viewed in plan9 suppose there was a bug in htmlfmt or any other
app plan9 plumbs to by default as soon as i can exploit htmlfmt i could
write a self-propagating virus for plan9.  as matt says, nedmail does
the same for images...

andrey