> -----Original Message-----
> From: Len Budney [mailto:[EMAIL PROTECTED]]
> 1. Scan the email's headers for specific local users addresses. This
> is hard; in fact for mailing list emails or BCC-ed emails, it is
> basically impossible. (If your ISP uses qmail, then you can do it
> after all, since qmail writes the envelope at the top of every
> message.)
I'm looking at setting up a qmail server for a midsize corporation. Are you
saying that all delivery addresses that were supposed to be hidden by the
BCC and mailing list functions would be exposed to all recipients? In the
case of large mailing lists, that could add hundreds of kilobytes to each
message being sent, resulting in excessive bandwidth charges. Obviously the
qmail list is not doing this, or is someone along the line deleting the
additional header info?
If only BCC is being defeated (it is no longer blind) then this is a serious
security consideration for us. Please explain further.
Don Wright -- Computer Support
Rennert World Travel, Inc.
