Author: John W. Baxter Date: To: exim-dev Subject: Re: [exim-dev] Pass recipients to spamd
On 1/16/06 12:14 AM, "Jakob Hirsch" <jh@???> wrote:
> John W. Baxter wrote:
>
>> Putting the recipients (plural) into the Received: header, unless that
>> header is later (unhelpfully and non-RFC-compliantly removed) reveals BCC
>> recipients in the receiving domain to the To: and Cc: recipients in the
>> domain. That is clearly a privacy problem (the sender used Bcc for a
>> reason).
>
> Um, yes, I wrote that in the message before. That's why I want to put the
> recipients _not_ in the Received: header, but into the X-Envelope-To:
> header of the mbox-spool file. This file is only used for content scanning
> (AFAICS), so there are no privacy issues.
>
>
Sorry. I read your words as an alternative. The privacy issue remains
unless the X-Envelope-To: header is removed before the message is delivered
(which may also have been stated earlier).
