Duane Hill a écrit : > On Mon, 23 Feb 2009, Gene Heskett wrote: > >> I've seen both. but I didn't see a Bcc: line at all. > > There is no Bcc: line (email header). Therefore, a Bcc: is supplied as a > RCPT TO during SMTP time and that is it. >
In theory, there is a Bcc: header. But since you don't want non Bcc-ed recipients to know that there was a Bcc, such a header shouldn't be added, except if different copies are sent (in a way to guarantee that a non Bcc-ed recipient shouldn't know there was a Bcc at all, and a Bcc-ed recipient shouldn't know there were other Bcc-ed addresses). This should all be done in the MUA. An MSA could alter submitted messages, but the MUA is the user interface, so that's the right place to handle this stuff. (a (very) long time ago, I've found a bug in Eudora: if you send a message with a Bcc, then you chose to forward the sent message, then the Bcc: header will be disclosed in the forwarded copie!).