Re: [Evolution] Bug 738247 - unwanted information disclosure in message headers






No recipient needs to know neither sender's workstation IP address
nor its real host name.

I would disagree with that.  The headers are mainly there for debugging
and auditing not for "informing" the end recipient - putting bogus
information in those headers just negates their primary purpose and
makes life difficult for admins. For instance, I work in a large
institution (no, it's not difficult to find out where) - if some MUA
obfuscated the senders host, I would class that program as not fit for
purpose - it's the sort of thing that spammers/phishers would do.

In reality you could extend your ultra privacy arguments to say that
the recipient doesn't need to see most of the headers, so why not strip
everything except the basic From/To/Subject/Date from the email before
it's delivered into the recipients mailbox?

P.

ps BTW, the senders IP address is usually inserted by the MTA, not the
MUA in the headers. Good luck with getting that changed.



[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]