Table of Contents
+
Table of Contents
First of all, Mutt contains no security holes included by intention but may contain unknown security holes. As a consequence, please run Mutt only with as few permissions as possible. Especially, do not run Mutt as @@ -33,7 +35,7 @@ the super user.
When configuring Mutt, there're some points to note about secure setups so please read this chapter carefully. -
+
Although Mutt can be told the various passwords for accounts, please never store passwords in configuration files. Besides the fact that the system's operator can always read them, you could forget to mask it out @@ -41,29 +43,29 @@ when reporting a bug or asking for help via a mailing list. Even worse, your mail including your password could be archived by internet search engines, mail-to-news gateways etc. It may already be too late before you notice your mistake. -
Mutt uses many temporary files for viewing messages, verifying digital signatures, etc. As long as being used, these files are visible by other users and maybe even readable in case of misconfiguration. Also, a different location for these files may be desired which can be changed -via the $tmpdir variable. -
+via the $tmpdir variable. +
Message-Id: headers contain a local part that is to be created in a -unique fashion. In order to do so, Mutt will âleakâ some +unique fashion. In order to do so, Mutt will âleakâ some information to the outside world when sending messages: the generation of this header includes a step counter which is increased (and rotated) with every message sent. In a longer running mutt session, others can -make assumptions about your mailing habbits depending on the number of +make assumptions about your mailing habits depending on the number of messages sent. If this is not desired, the header can be manually -provided using $edit_headers (though not -recommended). -
+provided using $edit_headers (though +not recommended). +
As Mutt be can be set up to be the mail client to handle
mailto: style links in websites, there're security
considerations, too. Arbitrary header fields can be embedded in these
links which could override existing header fields or attach arbitrary
files using the Attach:
-psuedoheader. This may be problematic if the $edit-headers variable is
+pseudoheader. This may be problematic if the $edit-headers variable is
unset, i.e. the user doesn't want to see header
fields while editing the message and doesn't pay enough attention to the
compose menu's listing of attachments.
@@ -74,7 +76,7 @@ mailto:joe@host?Attach=~/.gnupg/secring.gpg
will send out the user's private gnupg keyring to
joe@host if the user doesn't follow the information
on screen carefully enough.
-