To comment on the following update, log in, then open the issue:
http://www.openoffice.org/issues/show_bug.cgi?id=78979
Issue #|78979
Summary|Confirmation mail sent to envelope from, not header fr
|om
Component|www
Version|current
Platform|All
URL|
OS/Version|All
Status|NEW
Status whiteboard|
Keywords|
Resolution|
Issue type|DEFECT
Priority|P3
Subcomponent|openoffice.org mailing lists
Assigned to|[EMAIL PROTECTED]
Reported by|mbayer
------- Additional comments from [EMAIL PROTECTED] Thu Jun 28 17:57:33 +0000
2007 -------
I tried to unsubscribe from an OOo mailing list using the email address with
that I was subscribed to the list, [EMAIL PROTECTED] (all domain names
substituted
according to RfC2606 in order to avoid unsolicited emails).
I got the following automatic message from ezmlm:
| From: [EMAIL PROTECTED]
| To: [EMAIL PROTECTED]
[...]
| To confirm that you would like
|
| [EMAIL PROTECTED]
|
| removed from the dev-digest mailing list, please send an empty reply
| to this address:
Note ezmlm used a completely different address which I didn't use to subscribe,
nor to unsubscribe, as the included original message proves:
| --- Enclosed is a copy of the request I received.
|
| Return-Path: <[EMAIL PROTECTED]>
| Date: Thu, 28 Jun 2007 17:45:40 +0200
| From: Martin Bayer <[EMAIL PROTECTED]>
^^^
| To: [EMAIL PROTECTED]
So it seems to me as if ezmlm is using the envelope-from, not the header-from
here (similar to formail when called without the -t option).
This has several usability and privacy impacts:
- Confirmation mail is lost if envelope from is not replyable or not read.
- Confirmation mail can get lost if looked for in the wrong spam filter file.
- Confirmation mail can get lost if sender is on the wrong whitelist.
- Confirmation mail can be delivered to the wrong person.
In order to avoid to be unable to unsubscribe at all, users must use the - more
complicated - syntax [EMAIL PROTECTED] when
using an email address different from the sender or envelope from. This is
likely to be too much for the average user on a "users" mailing list.
Thus, the header from should be used for subscribing to a list. Confirmation
mails should be sent to the header from, not the envelope from or sender.
---------------------------------------------------------------------
Please do not reply to this automatically generated notification from
Issue Tracker. Please log onto the website and enter your comments.
http://qa.openoffice.org/issue_handling/project_issues.html#notification
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
