@bobfrankston/rmfmail 1.2.308 → 1.2.310

package/.commitmsg

@@ -1,25 +1,13 @@
-Trusted intermediaries: services that relay mail on other people's behalf
+Redirector warning: a link that ends at the proved sender hides nothing
 
-"How do I mark zoom and sites like that as trusted intermediaries?" (Bob
-2026-09-08, on a Google Calendar invitation From the organizer, signed
-d=google.com, every link wrapped as google.com/url?q=us02web.zoom.us). Two
-cautions fired — the server's spam verdict (GOOG_REDIR/KAM_GOOGLE_REDIR) and
-"a link hides where it goes" — and nothing in the app could answer either:
-the sender is not DMARC-proved, so "stop warning about this sender" was not
-offered, and the redirector rule's escape covers only the proved From.
-
-New allowlist.jsonc field `trustedIntermediaries` (e.g. google.com, zoom.us).
-An entry counts only on a message the service PROVABLY handled — a verified
-DKIM signature for its domain in the topmost Authentication-Results, or a
-DMARC pass when it is the From. Then its own redirector is routing, not
-laundering, and the bulk/association spam note is quieted exactly as a
-proved trusted sender quiets it. A message that merely links through
-google.com/url proves nothing and stays flagged; forgery evidence is never
-silenced. Findings now carry `via` (the signer behind the redirector, or the
-signed Sender: domain) and the viewer offers "Trust ‹domain› as an
-intermediary" under the banner; trustSenderOrDomain takes type
-"intermediary" (desktop + Android mirror), getAllowlist returns the list.
-docs/allowlist.md documents trustedSenders/trustedDomains (were missing) and
-the new list. Packages: mailx-types 0.1.83, mailx-store 0.1.115,
-mailx-settings 0.1.77, mailx-service 0.1.34, mailx-store-web 0.1.107,
-client 1.0.46.
+"Another safe message flagged" (Bob 2026-09-08): Microsoft 365 Message
+center, dmarc=pass header.from=microsoft.com policy reject, every link
+through Microsoft's click-tracker nam.safelink.emails.azure.net ending at
+admin.microsoft.com. The three existing escapes all miss — azure.net and
+microsoft.com are different organisations by hostname, nobody signed for
+azure.net, and the redirector is not the sender. Rule 4: when the link ENDS
+at the party that provably sent the mail, the reader lands exactly where a
+plain link would have taken them; the hop hides nothing from them. Requires
+proof (DMARC pass, or DKIM_VALID_AU / ALL_TRUSTED per the existing proof
+logic); an unproved message with the same links stays flagged. mailx-types
+0.1.87.

package/client/android-bootstrap.bundle.js

@@ -2392,6 +2392,7 @@ function serverSpamVerdict(input) {
   const senderDomain = (bare(header(input.headerLines, "sender")).split("@")[1] || "").toLowerCase();
   const relay = senderDomain ? a.signers.find((s) => sameOrg(s, senderDomain)) : "";
   const via = relay && !a.proved ? { via: relay } : {};
+  const relayNote = relay && !a.proved ? `. Sent on the author's behalf by ${relay}, which signed it; "Trust ${relay} as an intermediary" stops this note for mail ${relay} signs.` : "";
   const numbers = Number.isFinite(a.score) && Number.isFinite(a.threshold) ? `SpamAssassin score ${a.score} of ${a.threshold}` : "flagged by SpamAssassin";
   const why = a.reasons.length ? ` \u2014 ${a.reasons.join("; ")}` : "";
   const bayes = a.bayesHam ? "; your own trained filter puts it at 0-1% spam (BAYES_00)" : "";
@@ -2428,7 +2429,7 @@ function serverSpamVerdict(input) {
     id: "server-spam-verdict",
     severity: "caution",
     text: "Your mail server classified this as spam before delivering it.",
-    detail: `${proof}${numbers}${why}${bayes}`,
+    detail: `${proof}${numbers}${why}${bayes}${relayNote}`,
     ...via
   };
 }
@@ -2532,12 +2533,15 @@ function redirectorLink(input) {
         continue;
       if (sameOrg(target.hostname, url.hostname))
         continue;
+      if (senderDomain && sameOrg(target.hostname, senderDomain))
+        continue;
       const signer = signers.find((s) => sameOrg(s, url.hostname));
+      const how = signer ? ` ${signer} signed this message; "Trust ${signer} as an intermediary" stops this warning for links through ${signer} in mail it signs.` : ` Nobody signed this message for ${url.hostname}, so there is no intermediary to trust; only the sender could vouch for the link.`;
       return {
         id: "redirector-link",
         severity: "caution",
         text: `A link hides where it goes: it passes through ${url.hostname} and ends at ${target.hostname}.`,
-        detail: `${url.hostname} -> ${target.hostname}`,
+        detail: `${url.hostname} -> ${target.hostname}.${how}`,
         ...signer ? { via: signer } : {}
       };
     }