#20861: X-Mozilla-Keys (offline messages) in forwarded message (as an attachment) ---------------------------------------+---------------------------- Reporter: cypherpunks | Owner: sukhbir Type: defect | Status: new Priority: Medium | Milestone: Component: Applications/TorBirdy | Version: Severity: Normal | Keywords: TorBirdy 0.2.1 Actual Points: | Parent ID: Points: | Reviewer: Sponsor: | ---------------------------------------+---------------------------- When Thunderbird (TorBirdy 0.2.1) downloads and saves an email locally it at adds X-Mozilla-Keys, if the user forwards those email as an attachment the X-Mozilla-Keys are still in the email (resp *.eml-file) (what makes perfectly sense for signed emails)
excerpt from the received email's source code: {{{ -------------- Content-Type: message/rfc822; name="test.eml" Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename="test.eml" X-Mozilla-Keys: To: }}} And thereby it leaks the users email agent. -- Ticket URL: <https://trac.torproject.org/projects/tor/ticket/20861> Tor Bug Tracker & Wiki <https://trac.torproject.org/> The Tor Project: anonymity online _______________________________________________ tor-bugs mailing list tor-bugs@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs