[kmail2] [Bug 393421] No ability to hide the HTML Message Status Bar

[Martin Steigerwald]

https://bugs.kde.org/show_bug.cgi?id=393421

--- Comment #59 from Martin Steigerwald <Martin at Lichtvoll.de> ---
(In reply to Peter Humphrey from comment #58)
> (In reply to Christoph Feck from comment #55)
> > It is a security reason. You could receive an HTML mail that looks like a
> > plain text mail, and with HTML you have the ability to embed malicious links
> > everywhere. If you have no way to see that the message is actually an HTML
> > message, i.e. _outside_ the message viewer, you could click those links
> > without being aware that they link to sites that you don't see in the text.
> This is completely spurious. If you click on a link, you know it's a link.
> If it's a link it must be in HTML. You don't need an ugly great splodge to
> tell you it's HTML.
> 
> If you think there are people who can't see this, let them keep the warning.
> The rest of us, who've used the Internet for more than five minutes, should
> be allowed to switch the splodge off, as we always used to be.

Peter, KMail has clickable links also in plain text view. In HTML however the
link can go to an entirely different location than what the user gets to see,
while in plain text it cannot. Thus there is a valid security concern.

-- 
You are receiving this mail because:
You are the assignee for the bug.