188235 - Have option to deny loading of any remote content when viewing mail

Status: RESOLVED DUPLICATE of bug 28327

(MailNews Core :: Networking, defect)

Description

[Simon Fraser [no longer active]]

Currently, viewing a mail message can fire off remote loads for images
(controllable via a pref), iframe contents, style sheets, and other stuff. Not
only is this a security issue, it's also a privacy issue: spammers can use
weblogs, or FTP images requests, to gain information on when a mail message was
viewed, and from what IP address. Image requests may even reveal your email
addresss (depending on pref settings).

I think mail needs an option, defaulting to _on_, to turn off loading of all
remote content in mail. Only display what is contained in the mail message, and
nothing more.

Comment 1

[grylchan]

dupe of bug 28327? (No server hits at HTML mailnews reading - privacy)

Comment 2

[Simon Fraser [no longer active]]

Dup.

*** This bug has been marked as a duplicate of 28327 ***