Don Wright <[EMAIL PROTECTED]> wrote:
> > From: Len Budney [mailto:[EMAIL PROTECTED]]
> >   1. Scan the email's headers for specific local users addresses. This
> >      is hard; in fact for mailing list emails or BCC-ed emails, it is
> >      basically impossible. (If your ISP uses qmail, then you can do it
> >      after all, since qmail writes the envelope at the top of every
> >      message.)
 
> If only BCC is being defeated (it is no longer blind) then this is a serious
> security consideration for us. Please explain further.

What was meant (I believe) is that qmail records the envelope recipient that
it is currently delivering to at the top of each delivered mail, in a 
"Delivered-To: " header.  Other envelope recipients are not recorded.  This
allows you to recover the original envelope recipient the message was
addressed to, for use with qmail mail address extensions.

Charles
-- 
-----------------------------------------------------------------------
Charles Cazabon                            <[EMAIL PROTECTED]>
GPL'ed software available at:  http://www.qcc.sk.ca/~charlesc/software/
Any opinions expressed are just that -- my opinions.
-----------------------------------------------------------------------

Reply via email to