https://bugs.kde.org/show_bug.cgi?id=289339
Summary: Sending mail with BCC recipients sends the BCC header
to all recipients
Product: kmail2
Version: 4.7
Platform: Ubuntu Packages
OS/Version: Linux
Status: UNCONFIRMED
Severity: normal
Priority: NOR
Component: general
AssignedTo: [email protected]
ReportedBy: [email protected]
Version: 4.7 (using KDE 4.7.3)
OS: Linux
Sending an e-mail in KMail 4.7.4 (and possibly in earlier versions) with BCC
recipients sends an e-mail with the BCC header included to all recipients.
This is quite a bad breach of privacy, as it allows all recipients (including
BCC and non-BCC recipients) to see who was on the BCC list!
Reproducible: Always
Steps to Reproduce:
1. Create a new e-mail (New Message).
2. Set the To field to, say, [email protected], and the BCC field to, say,
[email protected] (real e-mail addresses should be used).
3. Send the e-mail.
4. Read the e-mail sent to either [email protected] or [email protected].
Actual Results:
The BCC field is part of the e-mail sent to both [email protected] and
[email protected].
Expected Results:
The BCC field should NEVER be sent as part of an e-mail, although it SHOULD be
stored in the locally-saved version in the sent-mail folder.
The "Steps to Reproduce" were performed on both my normal account (which has
been using KDE for a number of major releases), as well as a test account which
was completely fresh: no .kde/.local/.config directories.
I suspect the bug might be in akonadi_maildispatcher_agent, but that is just a
wild guess...
--
Configure bugmail: https://bugs.kde.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
_______________________________________________
Kdepim-bugs mailing list
[email protected]
https://mail.kde.org/mailman/listinfo/kdepim-bugs