Re: OT: Melissa Virus

[Jeff Hayward]

On Tue, 30 Mar 1999, Mark Delany wrote:

   >Delivered-To: headers.
   
   Good point, but external parties don't get to see those unless there's a 
   bounce. I was going to add that allowing bounces is a possible leakage - 
   perhaps I should say that now :>

The main thing, IMO, that D-T: reveals is the structure of any
virtual domains, to any recipient of a message sent to a VD.  This
includes messages forwarded, bounces, mailing list messages, etc.

Bounces are a rather interesting source of information.  When you
add in the DSN ESMTP extensions, the DSN stuff gives quite a bit of
info to anyone seeing it.

-- Jeff