Or another, simpler scenario. You are an oppositionist, and an undercover law enforcement officer sends you a personal message. You just go to watch, and your client (Android application or web version) automatically loads the image from the address specified in the message. Loads from the sender's server. And now your IP address is already known....

Reply to this note

Please Login to reply.

Discussion

Any reasonably sane email client will not load remote content by default. Nostr DM clients need to behave similarly. Some email clients might load external content through a dedicated proxy. That is also problematic as it lets the sender know exactly when the email is opened.