[Evolution] unwanted information disclosure

2014-06-12 Thread Eugene Kanter

https://bugzilla.gnome.org/show_bug.cgi?id=702703

Almost a year later, are there any plans to address the problem?
I am tired of applying my dirty patch every time a new 
evolution-data-server package comes out.


Eugene.
___
evolution-list mailing list
evolution-list@gnome.org
To change your list options or unsubscribe, visit ...
https://mail.gnome.org/mailman/listinfo/evolution-list


Re: [Evolution] unwanted information disclosure

2014-06-13 Thread Milan Crha
On Thu, 2014-06-12 at 13:18 -0400, Eugene Kanter wrote:
> https://bugzilla.gnome.org/show_bug.cgi?id=702703
> 
> Almost a year later, are there any plans to address the problem?
> I am tired of applying my dirty patch every time a new 
> evolution-data-server package comes out.

Hi,
well, I'm sorry, but almost a year old bug report and the only person
interested in it (according to CC, where is me and Andre) is you.

I do not know, did you ever check what for example Google does? I did
try it right now, I sent an email from their web UI to myself and guess
what, the header looks like this:

   Message-ID: 


Is it wrong that they "exposed" the mail.gmail.com in the message ID?
No, I do not think so. I would not worry about it.

I didn't try anything like thunderbird, clawsmail, mutt, geary, ..., but
I would not be surprised if they do the same - following the RFC.

On the other hand, I agree that there can be valid reasons why you want
to be "hidden", but that didn't strike any huge attention by anyone else
security aware, thus your bug report has a pretty low priority.
Bye,
Milan

___
evolution-list mailing list
evolution-list@gnome.org
To change your list options or unsubscribe, visit ...
https://mail.gnome.org/mailman/listinfo/evolution-list