Starko Reporter
	Description • 14 years ago

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.10) Gecko/20100914 Firefox/3.6.10
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.9) Gecko/20100915 Thunderbird/3.1.4

Clicking on "Always show remote content from ..." brings up "New Contact ... ..." window. Unless you create a new contact the content will stay hidden by default. 

Reproducible: Always

Steps to Reproduce:
When an email contains HTML with remote content (images that should be loaded from http server) Thunderbird displays a small warning frame. That frame gives two options: "Show remote content" button and "Always show remote content from ..." link. Clicking on that link brings up "New Contact ... ..." window. 

Actual Results:  
You are forced to create a new contact. Unless you create a new contact the content will stay hidden by default. 

Expected Results:  
This is a case of mistaken logic and a usability issue.

While i trust everyone in my address book it does not mean that everyone i trust has to be in it.

For instance why would i want to have a newsletter from noreply@something-or-other.com in my contacts list?

I think the thinking should be turned around - when i click on that link - add the email address to whatever safe-filter AND only then ask me whether i would like to add this sender to the address book. And it would really be clever if email addresses with "noreply@" in them were detected and the second step was skipped. 

You might add a new contact list (besides the existing Personal and Collected) to keep track of these entries.

	Ludovic Hirlimann [:Usul]
	Comment 1 • 14 years ago

So if you set mailnews.message_display.disable_remote_image to true, all emails will display remote images, even those that aren't in your address book.

This as privacy issues, ie some people will send email whit image links containing your email address and track which email addresses show the remote content. That's the reason why the pref is set to false by default.

Now you would like to be able to edit a white list, that would probably copy all your address book into and add emails you never write to , right ? ( bug 370165 is another try at doing this in another way )

	Starko Reporter
	Comment 2 • 14 years ago

(In reply to comment #1)
I am not a native speaker so probably i was not clear enough.
 
I never implied that mailnews.message_display.disable_remote_image should be set to true. And bug #370165 has nothing to do with this one.
> Now you would like to be able to edit a white list, that would probably copy
> all your address book into and add emails you never write to , right ? 
Sorry, i have no idea what you mean by this. It definitely describes some functionality i have no opinion about.  

I will try to rephrase my original post.
Whitelisting a certain 'from' address is done through the contacts list which is a bad decision. People use contact lists for Contacting others. Since nobody will be contacting any of the newletters, yahoo groups, mailing lists, forum notifiers etc etc, those email addresses should not clutter the Address Book.
"show remote content whitelist" should be a separate list.

	Starko Reporter
	Comment 3 • 14 years ago

> Now you would like to be able to edit a white list, that would probably copy
> all your address book into and add emails you never write to , right ? 
I have tried to understand what you meant by the above and i think you are on the right track... almost. 

There is no need to copy all addresses. I think there should be another list, separate from the Personal Address Book or Collected Addresses (or any other user created list). The name of the list should be self-explaining: "Allow remote content" or something like that. So when i click on the link "Allow blah blah blah" a new Contact (or whatever the name is) class instance should be created with "GroupID" property set to the "Allow Remote Content" group. Then a dialog box should give user an option to add this new contact to "Personal Contacts" instead. That's it. 

I realize that Thunderbird code most probably differs from what i described so it was just an example.

	Starko Reporter
	Comment 4 • 14 years ago

Sorry, it seems i have an ADD and get easily distracted - missed an important little bit my previous comment:
> There is no need to copy all addresses. I think there should be another list,
> separate from the Personal Address Book or Collected Addresses (or any other
> user created list). The name of the list should be self-explaining: "Allow
> remote content" or something like that. So when i click on the link "Allow blah
> blah blah" a new Contact (or whatever the name is) class instance should be
> created with "GroupID" property set to the "Allow Remote Content" group. 

And a "allow remote content" boolean property set to True

> Then a
> dialog box should give user an option to add this new contact to "Personal
> Contacts" instead. 

Which user can confirm or cancel. 

> That's it. 
> 
> I realize that Thunderbird code most probably differs from what i described so
> it was just an example.