{"action":"created","issue":{"url":"https://api.github.com/repos/autocrypt/autocrypt/issues/226","repository_url":"https://api.github.com/repos/autocrypt/autocrypt","labels_url":"https://api.github.com/repos/autocrypt/autocrypt/issues/226/labels{/name}","comments_url":"https://api.github.com/repos/autocrypt/autocrypt/issues/226/comments","events_url":"https://api.github.com/repos/autocrypt/autocrypt/issues/226/events","html_url":"https://github.com/autocrypt/autocrypt/issues/226","id":272387859,"number":226,"title":"interaction with mailing lists that rewrite From:","user":{"login":"dkg","id":66738,"avatar_url":"https://avatars2.githubusercontent.com/u/66738?v=4","gravatar_id":"","url":"https://api.github.com/users/dkg","html_url":"https://github.com/dkg","followers_url":"https://api.github.com/users/dkg/followers","following_url":"https://api.github.com/users/dkg/following{/other_user}","gists_url":"https://api.github.com/users/dkg/gists{/gist_id}","starred_url":"https://api.github.com/users/dkg/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dkg/subscriptions","organizations_url":"https://api.github.com/users/dkg/orgs","repos_url":"https://api.github.com/users/dkg/repos","events_url":"https://api.github.com/users/dkg/events{/privacy}","received_events_url":"https://api.github.com/users/dkg/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":1,"created_at":"2017-11-08T23:31:37Z","updated_at":"2017-11-09T15:52:07Z","closed_at":null,"author_association":"OWNER","body":"Some mailing lists rewrite From: addresses of messages they re-send to their subscribers.\r\n\r\nSome of those mailing lists also forward any headers that they already got.\r\n\r\nThis means that anyone capable of publishing to that mailing list is also capable of publishing an autocrypt header for that mailing list, which could cause people to encrypt to the list depending on their prefer-encrypt settings :(\r\n\r\ndo we want to have guidance for how to deal with or detect mailing lists specifically?  should there be guidance for mailing list implementations that they should strip also Autocrypt: headers if they rewrite From: ?\r\n\r\nThis is not a Level 1 concern."},"comment":{"url":"https://api.github.com/repos/autocrypt/autocrypt/issues/comments/343197526","html_url":"https://github.com/autocrypt/autocrypt/issues/226#issuecomment-343197526","issue_url":"https://api.github.com/repos/autocrypt/autocrypt/issues/226","id":343197526,"user":{"login":"dkg","id":66738,"avatar_url":"https://avatars2.githubusercontent.com/u/66738?v=4","gravatar_id":"","url":"https://api.github.com/users/dkg","html_url":"https://github.com/dkg","followers_url":"https://api.github.com/users/dkg/followers","following_url":"https://api.github.com/users/dkg/following{/other_user}","gists_url":"https://api.github.com/users/dkg/gists{/gist_id}","starred_url":"https://api.github.com/users/dkg/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dkg/subscriptions","organizations_url":"https://api.github.com/users/dkg/orgs","repos_url":"https://api.github.com/users/dkg/repos","events_url":"https://api.github.com/users/dkg/events{/privacy}","received_events_url":"https://api.github.com/users/dkg/received_events","type":"User","site_admin":false},"created_at":"2017-11-09T15:52:07Z","updated_at":"2017-11-09T15:52:07Z","author_association":"OWNER","body":"itym `_is-remailer=ok`, right?  it would be a non-critical attribute.\r\n\r\nI'm a little bit reluctant to encourage Autocrypt clients to ignore every message that has a `List-Id` header, because for the lists that *don't* rewrite from, the list is a relatively easy way to gather keys for list participants to enable encrypted side-channel discussion.  Not sure what the right cutoff is here :/\r\n"}}
{"actor":{"display_login":"dkg"}}