+-- On 29082002 12:05:50 +0000, Will Yardley uttered:
| krjw wrote:
| > 
| > The my_hdr command is handy, but appears to allow only the addition of
| > headers that mutt doesn't already add to mail.  From what I've seen over
| > the past 2 days of using mutt, if my_hdr is used to add a header that
| > mutt already adds, said header is simply added twice.  For example, I
| > tried this with the User-Agent header (I don't like version numbers
| > showing up, although nuking the version# might break things?) and it
| > showed up twice anyway.  So, any intuitive way to do this sort of thing?
| 
| wouldn't 'unset user_agent' work? (what's wrong with version numbers
| anyway)?

Doh! Yep, that'd do it.  *sigh*  As for version numbers, there's nothing
wrong with them unless they are advertised to potentially malicious
users.  Assuming a given version of a given MUA has a known security
hole, sending a mail via that MUA with a header containing version info
is just begging for trouble.  Call it paranoia.  In general it's
undersirable for network-aware software (whether an MUA, daemon --
like httpd or sshd -- whatever) to advertise its version # to untrusted
users.

The Internet is not as friendly as it used to be.

Thanks for the feedback.

krjw.

| -- 
| Will Yardley
| input: william < @ hq . newdream . net . >
| 

Reply via email to