At 10:28 AM Tuesday 3/30/99, Jeff Hayward wrote:
>On Tue, 30 Mar 1999, Mark Delany wrote:
>
>   Examples?
>   
>   1. uid (but not username!) in Received:
>   2. qid & qp on 250 ok (they largely provide traffic analysis-type info)
>   3. IP addresses and reverse names (possibly from a split DNS) in Received:
>   lines
>
>Delivered-To: headers.

Good point, but external parties don't get to see those unless there's a 
bounce. I was going to add that allowing bounces is a possible leakage - 
perhaps I should say that now :>


Regards.

Reply via email to