Privacy implications of email tracking [pdf]
We still have a serious problem with mail client behavior.  There is <i>so much</i> that clients could still do to add basic security, even though E-mail protocols are terrible.<p>For instance, why do we not see in every client a big warning at the top saying something like: “NOTE: YOU HAVE NEVER RECEIVED E-MAIL FROM THIS INTERNET LOCATION BEFORE.”?  Heck, such messages should even be auto-quarantined to specific folders.  It would go a long way to protect people from constantly opening spam.<p>And, why <i>by default</i> do they insist on making everything look “simple” and “clean” at the expense of helping users to do even the most basic validation?  They show senders as short names like “Facebook” when <i>CLEARLY</i> the message is coming from facebook.spammer.com or whatever when you do even the slightest digging into the original message.<p>Why are “rules” so complex, since damn near everybody needs them for basic sanity?  There ought to be a button in every message saying something like “Mark Every Future Message From This Sender as Junk”, and similar short-cuts.