Bug 4042

Summary:	MDN mail-accountname leak
Product:	Claws Mail (GTK 2)	Reporter:	Paul <01234+clawsmail>
Component:	Other	Assignee:	users
Status:	RESOLVED FIXED
Severity:	major
Priority:	P3
Version:	3.14.1
Hardware:	PC
OS:	Linux
Bug Depends on:	1606
Bug Blocks:

Description Paul 2018-06-21 03:37:12 UTC

If I receive an MDN and I want to confirm it manually, it warn me that I'm not the official receiver (because it was sent to an alias). If i confirm the MDN, the receiver get also my original e-mail account name which is bad for privacy reasons:

Original-Recipient: rfc822;ALIAS@example.com
Final-Recipient: rfc822;ACCOUNTNAME@example.com

- maybe we can avoid this after setting up alias adresses?

Comment 1 Paul 2018-06-21 07:29:44 UTC

Only leaks if no "SMTP only" account was created for the receiving alias. Maybe a warning text in the popup is a good choice.