Re: [Evolution] Evolution resolves MLs to to, instead of using ML-address - compliance/privacy issue

[Zan Lynx <zlynx acm org>]

On 3/25/21 3:30 AM, Sebastian Rottmann wrote:
> But evolution does some kind of usability and gives autocomplete to the
> user. The user then sees "mailinglist <some user company com  <Name>>"
> when they write their mail. If the user then presses enter the to: just
> shows an "mailinglist". When they send this mail, the mailinglist gets
> resolved to all people subscribed to the list, when sended.
>
> Every recipient of the mail (subscriber to the mailinglist) then sees
> everyone else (every subscriber) when they receive the mail. I foresee
> a privacy compliance issue on the horizon.

I don't know the solution to your problem but there are a few things 
here that stand out.

If the emails to the list do not normally include all of the users and 
email addresses then that cannot be the source of the autocomplete.

The source of the autocomplete must be your Exchange server. Evolution 
is querying the database for the autocomplete list. It does this for 
LDAP too if it is configured.

Since anyone with the same search permissions as your email sender can 
search the server for the mailing list members, fixing Evolution does 
not actually help you here.

I think you need to fix your Exchange server so it does not provide the 
list membership in response to user search.

Where else could the full user list come from, if not from your server?
--
                Knowledge is Power -- Power Corrupts
                        Study Hard -- Be Evil