https://bugs.kde.org/show_bug.cgi?id=289339

           Summary: Sending mail with BCC recipients sends the BCC header
                    to all recipients
           Product: kmail2
           Version: 4.7
          Platform: Ubuntu Packages
        OS/Version: Linux
            Status: UNCONFIRMED
          Severity: normal
          Priority: NOR
         Component: general
        AssignedTo: kdepim-bugs@kde.org
        ReportedBy: j.zaits...@zap.org.au


Version:           4.7 (using KDE 4.7.3) 
OS:                Linux

Sending an e-mail in KMail 4.7.4 (and possibly in earlier versions) with BCC
recipients sends an e-mail with the BCC header included to all recipients. 
This is quite a bad breach of privacy, as it allows all recipients (including
BCC and non-BCC recipients) to see who was on the BCC list!


Reproducible: Always

Steps to Reproduce:
1. Create a new e-mail (New Message).
2. Set the To field to, say, te...@example.com, and the BCC field to, say,
te...@example.com (real e-mail addresses should be used).
3. Send the e-mail.
4. Read the e-mail sent to either te...@example.com or te...@example.com.


Actual Results:  
The BCC field is part of the e-mail sent to both te...@example.com and
te...@example.com.

Expected Results:  
The BCC field should NEVER be sent as part of an e-mail, although it SHOULD be
stored in the locally-saved version in the sent-mail folder.


The "Steps to Reproduce" were performed on both my normal account (which has
been using KDE for a number of major releases), as well as a test account which
was completely fresh: no .kde/.local/.config directories.

I suspect the bug might be in akonadi_maildispatcher_agent, but that is just a
wild guess...

-- 
Configure bugmail: https://bugs.kde.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
_______________________________________________
Kdepim-bugs mailing list
Kdepim-bugs@kde.org
https://mail.kde.org/mailman/listinfo/kdepim-bugs

Reply via email to