Re: [Assp-test] bcc X-ASSP-Intended-For header lines!!

2018-05-29 Thread Thomas Eckardt
The default value in the current version is 'incoming and local'. Thomas Von:"frny" An: assp-test@lists.sourceforge.net Datum: 29.05.2018 11:13 Betreff: Re: [Assp-test] bcc X-ASSP-Intended-For header lines!! Wanted to make a new post but didn't

Re: [Assp-test] bcc X-ASSP-Intended-For header lines!!

2018-05-29 Thread frny
Wanted to make a new post but didn't work, so why not post it here: we've encountered that the standard setting in the OVA, to append the "X-Assp-Intended-For"-Header both to incoming and outgoing mails, is HUGELY insecure and also might violate privacy rules in Europe in some setups regarding BCC

Re: [Assp-test] bcc X-ASSP-Intended-For header lines!!

2017-05-29 Thread K Post
Checking in on this, Thomas. Have I lost my mind again? On Thu, May 25, 2017 at 10:29 PM, K Post wrote: > I'm sorry for the multiple emails on this, but I'm afraid that I'll forget > this thought if I don't mention it now. I'll try not to send any more > messages until I get a reply (or at lea

Re: [Assp-test] bcc X-ASSP-Intended-For header lines!!

2017-05-25 Thread K Post
I'm sorry for the multiple emails on this, but I'm afraid that I'll forget this thought if I don't mention it now. I'll try not to send any more messages until I get a reply (or at least until morning!). If this isn't the way it's supposed to work, wouldn't it be best for the X-ASSP-Intended-For

Re: [Assp-test] bcc X-ASSP-Intended-For header lines!!

2017-05-25 Thread K Post
I did a little bit of testing, this isn't exchange's fault as far as I can tell. If I telnet to port 25 of the ASSP server from the inside and manually do a send, the X-ASSP-Indended-For lines still appear. telnet 127.0.0.1 25 > helo me > mail from: m...@ourcharity.org > rcpt to: gmailcl...@gmail

Re: [Assp-test] bcc X-ASSP-Intended-For header lines!!

2017-05-25 Thread K Post
for now, I'll disable the AddIntendedForHeader option, but I will miss the feature On Thu, May 25, 2017 at 7:24 PM, K Post wrote: > I just got a report for a user who bcc'ed a bunch of people on a message. > She discovered that in the header, the X-ASSP-Intended-For line shows up in > the re

[Assp-test] bcc X-ASSP-Intended-For header lines!!

2017-05-25 Thread K Post
I just got a report for a user who bcc'ed a bunch of people on a message. She discovered that in the header, the X-ASSP-Intended-For line shows up in the recipient's message. So if a message was sent to pers...@otherorg.com and pers...@otherorg.com both as bcc, the headers in the message received