<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta http-equiv="Content-Type" content="text/xhtml; charset=utf-8">
</head>
<body>
<div style="font-family:sans-serif"><div style="white-space:normal">
<p dir="auto">On 22 Feb 2017, at 23:05, Sam Hathaway wrote:</p>
<p dir="auto"></p></div>
<div style="white-space:normal"><blockquote style="border-left:2px solid #777; color:#777; margin:0 0 5px; padding-left:5px"><p dir="auto">A while ago I posted asking if there was a way to tell MailMate to load remote content only from specific domains. The rationale here is that, since sender addresses can be easily spoofed, allowing remote content loading based on sender address is not really effective at preventing tracking.</p>
</blockquote></div>
<div style="white-space:normal">
<p dir="auto">Nevertheless, this is what most users request. I'm considering to build in a white-listing feature based on the email address, but I'll then combine it with a requirement for some other headers to also match, e.g., the <code style="background-color:#F7F7F7; border-radius:3px; margin:0; padding:0 0.4em" bgcolor="#F7F7F7">X-Mailer</code> header. This part could be optional.</p>
<p dir="auto">(The latest test release includes blacklisting addresses for the completion of email addresses in the composer. This is kind of similar which is why I've been considering how to improve image blocking again.)</p>
<p dir="auto"></p></div>
<div style="white-space:normal"><blockquote style="border-left:2px solid #777; color:#777; margin:0 0 5px; padding-left:5px"><p dir="auto">By allowing loads by source domain, we can effectively control where potential tracking data ends up. (This is one of the few features I miss from Thunderbird.)<br>
<br>
Folks suggested that I try using Little Snitch to do this, and so I did. Turns out, Little Snitch is too intrusive when used this way, as it asks about each domain in turn, and I have to allow or deny each one. (And there are *lots* of domains referenced in your average HTML email!)<br>
<br>
Thunderbird, in the other hand, uses a popup menu which lists each domain and allows the user to select which they would like to allow content from.</p>
</blockquote></div>
<div style="white-space:normal">
<p dir="auto">But it's still the same number of domains. If I understand correctly, you're just not forced to make a decision about every one of them.</p>
<p dir="auto">I've always wanted the image-blocking feature to also allow the user to see exactly what was blocked. If some kind of popup menu is implemented then it wouldn't be far from an implementation similar to Thunderbird.</p>
<p dir="auto">No promises though.</p>
<p dir="auto">-- <br>
Benny</p>
</div>
</div>
</body>
</html>