Bug 4042 - MDN mail-accountname leak
Summary: MDN mail-accountname leak
Status: RESOLVED FIXED
Alias: None
Product: Claws Mail (GTK 2)
Classification: Unclassified
Component: Other (show other bugs)
Version: 3.14.1
Hardware: PC Linux
: P3 major
Assignee: users
URL:
Depends on: 1606
Blocks:
  Show dependency tree
 
Reported: 2018-06-21 01:37 UTC by Paul
Modified: 2018-06-21 09:57 UTC (History)
0 users

See Also:


Attachments

Description Paul 2018-06-21 01:37:12 UTC
If I receive an MDN and I want to confirm it manually, it warn me that I'm not the official receiver (because it was sent to an alias). If i confirm the MDN, the receiver get also my original e-mail account name which is bad for privacy reasons:

Original-Recipient: rfc822;ALIAS@example.com
Final-Recipient: rfc822;ACCOUNTNAME@example.com

- maybe we can avoid this after setting up alias adresses?
Comment 1 Paul 2018-06-21 05:29:44 UTC
Only leaks if no "SMTP only" account was created for the receiving alias. Maybe a warning text in the popup is a good choice.

Note You need to log in before you can comment on or make changes to this bug.