News for hackers. Stuff that matters.
Re:Google launches AMP for email by JohnFen on Tuesday March 26, 2019 @01:14PM (#19493840)
...and the contagion is already spreading.

This effort destroys half of what makes email useful. I know that moving forward, I won't accept amp emails. If anyone sends me one, I'll just have to tell them to please send me a plain-text copy if they really want me to see it.

On the plus side, this could make spam much easier to detect: if it's amp-based, then it's most likely to be spam.

Re:Google launches AMP for email by Bartweiss on Tuesday March 26, 2019 @02:14PM (#19494535)
> if it's amp-based, then it's most likely to be spam.

Which is particularly funny because amp URLs have also become a major tell for spam. Want your sketchy sign-in page to come from a legitimate-looking domain? Just set it up with AMP and all the "check the pre-.com URL" rules people know will completely fail them!

I wonder if AMP for email will produce the same hell of broken redirects that it's created for webpages?

Re:Google launches AMP for email by hedora on Tuesday March 26, 2019 @11:42PM (#19498003)
At smaller firms, IT security training often consists of sending phishing emails, and trying to get employees to somehow navigate the (literally) dozens of TLD’s that outsourced company functions use for official company business.

I get the impression most industries are moving this way (by outsourcing everything they possibly can to *aaS).

I don’t understand why it has to be https://company.subcontractor.com, and not https://subcontractor.company.com

There’s probably a depressingly large and profitable industry waiting to be invented by the person that solves that problem.

From what I can tell, AMP email is a step in the other direction: run JS and active content as the email loads, presumably from an unauthenticated sender, and no https padlock that users already understand.

Re:Google launches AMP for email by baroffoos on Tuesday March 26, 2019 @06:30PM (#19496589)
No one is going to send you an amp email. Amp emails seem only useful for marketing spam
Re:Google launches AMP for email by riffraff on Wednesday March 27, 2019 @02:44AM (#19498600)
won't gmail end up using AMP by default, like it now defaults to html emails (forcing me to unformat things all the time)?

If so, you'll have no choice but accept the AMP crud, or cut off many of your contacts.

Re:Google launches AMP for email by TomMarius on Tuesday March 26, 2019 @01:16PM (#19493868)
I am already not reading HTML emails if I'm not expecting them (e.g. confirmation link).
Re:Google launches AMP for email by JohnFen on Tuesday March 26, 2019 @01:18PM (#19493906)
Yes, I disallow HTML as well. Well, technically, I don't allow HTML to render. If the email is important, then I'll read the HTML source myself and extract the parts that are important.
Re:Google launches AMP for email by sam_lowry_ on Tuesday March 26, 2019 @01:54PM (#19494337)
Because mutt?
Re:Google launches AMP for email by JohnFen on Tuesday March 26, 2019 @03:46PM (#19495365)
No, I actually use Thunderbird. I disallow HTML for security reasons. It lets me avoid having any remote resources (such as images, etc.) load and eliminates the possibility of any sneaky JS or somesuch executing.
Re:Google launches AMP for email by martin_a on Tuesday March 26, 2019 @04:37PM (#19495784)
Is this a default setting I'm somehow missing?

I can choose to send mails as Plain Text but disable rendering of HTML mails? Where do I set that up?

Re:Google launches AMP for email by progval on Tuesday March 26, 2019 @05:12PM (#19496069)
View > Message Body As > Plain Text
Re:Google launches AMP for email by martin_a on Wednesday March 27, 2019 @03:27AM (#19498727)
Ok, will check this later. Thanks!
Re:Google launches AMP for email by EGreg on Tuesday March 26, 2019 @01:51PM (#19494301)
Why??
Re:Google launches AMP for email by bildung on Tuesday March 26, 2019 @03:02PM (#19494978)
Because HTML mails are almost always spam anyway.
Re:Google launches AMP for email by floren on Tuesday March 26, 2019 @05:50PM (#19496350)
And disabling HTML should help you avoid tracking pixels which tell the sender if you opened the email or not, etc.
Re:Google launches AMP for email by rypskar on Wednesday March 27, 2019 @03:57AM (#19498825)
You don't need to disable HTML for that. Thunderbird blocks remote content in HTML by default and only displays images embedded in the email. Isn't the tracking pixel mostly snake oil since it mostly tell if the user use gmail (preloading images) or an email client that block remote content by default?
Re:Google launches AMP for email by JohnFen on Tuesday March 26, 2019 @03:47PM (#19495372)
See my reply to sam_lowry above. Short answer: security.
Re:Google launches AMP for email by judge2020 on Tuesday March 26, 2019 @01:49PM (#19494274)
AMP emails do contain HTML as a fallback, as per the TC article.
Re:Google launches AMP for email by ballenf on Tuesday March 26, 2019 @02:29PM (#19494670)
And in 9-12 months, HTML fallback will become optional for senders who want to "optimize" their content. And to prevent "inconsistent user experiences, which are causing user confusion."
Re:Google launches AMP for email by Ajedi32 on Tuesday March 26, 2019 @02:38PM (#19494769)
Senders can include or not include any MIME types they want; that's just how email works. Though it seems unlikely they'd skip HTML fallback, since not every email client connected to Gmail is necessarily going to support AMP.
Re:Google launches AMP for email by pmontra on Tuesday March 26, 2019 @04:33PM (#19495755)
I guess that the HTML fallback is not cost free to create. I bet that some of them will be links to the website, like the "read this message on the web" links that are almost the only fallback we have from complex layouts now.
Re:Google launches AMP for email by gumby on Tuesday March 26, 2019 @06:16PM (#19496505)
Seems like a lot of messages exclude the text alternative fallback!

I filter those and sent them straight to my trash unread.

Re:Google launches AMP for email by progval on Tuesday March 26, 2019 @05:28PM (#19496187)
That's what the specification says they should. Just like HTML emails should not have an empty "text/plain" as an alternative to their main "text/html" content, but some mailers do that anyway.

And I do mean empty, not absent, so MUAs don't even try to convert the HTML to plaintext.

Or sometimes, the plaintext version is buggy, eg. because the mailer forgot to remplace {{template variables}}. Or because it sent a boilerplate text. Or the content of a mailing that was sent years ago. (All of these are true stories, I got emails like these.)

The conclusion being that if some format (AMP, HTML, ...) becomes prevalent, developers will stop caring about other formats.

Re:Google launches AMP for email by baroffoos on Tuesday March 26, 2019 @10:15PM (#19497672)
Just like how html emails have text for a fallback which usually contains the text "Use a html enabled email client"
Re:Google launches AMP for email by JohnFen on Tuesday March 26, 2019 @03:49PM (#19495378)
Yeah, we'll see how many AMP users actually do that.