Rail v0.10.0

Trust a whole domain's remote pictures: remote_images_from takes "@example.com", and I
asks whether to trust the sender or their domain, offering the domain only for mail its server
vouched for (#176).

Added

• Trust a whole domain's remote pictures. remote_images_from takes "@example.com" for
  every address at exactly that domain, as well as single addresses. I now asks whom to
  trust, the sender or their domain, and offers the domain only when the receiving server
  vouched for the message (DMARC or aligned DKIM), so a forged From line cannot win it. I
  then Enter trusts the sender as before, and I on trusted mail stops trusting whichever
  entry matched. See Trusting a sender or a domain.

Downloads

Archive	For
rail-v0.10.0-x86_64-unknown-linux-gnu.tar.gz	Linux x86_64, glibc 2.36 or newer
rail-v0.10.0-aarch64-unknown-linux-gnu.tar.gz	Linux ARM64, glibc 2.36 or newer
rail-v0.10.0-aarch64-apple-darwin.tar.gz	macOS 11 or newer on Apple Silicon
rail-v0.10.0-x86_64-apple-darwin.tar.gz	macOS 11 or newer on Intel

Each archive holds the rail binary, the README and docs/, the changelog, the licences and
BUILD-INFO.txt. Extract it and put rail in a directory on your PATH.

Check an archive against SHA256SUMS, and check where it was built:

sha256sum -c --ignore-missing SHA256SUMS   # macOS: shasum -a 256 -c --ignore-missing SHA256SUMS
gh attestation verify rail-v0.10.0-<target>.tar.gz --repo vitosans/rail

On other systems, build from the tag with Rust 1.88 or newer:

git clone --branch v0.10.0 --depth 1 https://github.com/vitosans/rail.git
cd rail
cargo install --locked --path crates/rail