In the first place you allow remote content from all websites that are listed. Regardless who the sender is.

In the second you allow all remote content that specific sender links to. You leave it up to the sender not to be hacked.

I would not use either. But thats me.

Thanks. Using neither is not really an option because I have to choose to allow remote content even if it comes from a source I know is trusted. For instance, I receive a newsletter that I signed up for. When it came today, there were 8 origins listed for it. The next time it comes, I want it to allow all of the remote content, because I know it is safe. In order to do that, which option would be a better choice?

If you always want that email address to show remote content: click on 'Options' button and choose 'allow remote content from that email address'. Usually the last in the list. There will only be one option showing the email address.

Thanks, I'll try it.