#1090: bcc:s given away through encryption
Old description:
> {{{
> Package: mutt
> Version: 1.3.25-1
> Severity: normal
>
> -- Please type your report below this line
>
> When encrypting (with gpg) and having several bccs,
> it is encrypted to them all. So the to: and cc: recipients
> can see the bcc:ed people.
>
> The Ägypten-Project (adding encryption to kmail) has a similiar problem.
> Check their comments on how to solve this:
>
> http://intevation.de/rt/webrt?serial_num=948\&display=History
>
> -- Build environment information
>
> (Note: This is the build environment installed on the system
> muttbug is run on. Information may or may not match the environment
> used to build mutt.)
>
> - gcc version information
> cc
> Reading specs from /usr/lib/gcc-lib/i386-linux/2.95.4/specs
> gcc version 2.95.4 20011006 (Debian prerelease)
>
> - CFLAGS
> -Wall -pedantic -g -O2
>
> -- Mutt Version Information
>
> Mutt 1.3.25i (2002-01-01)
> Copyright (C) 1996-2001 Michael R. Elkins und andere.
> Mutt übernimmt KEINERLEI GEWÄHRLEISTUNG. Starten Sie `mutt -vv', um
> weitere Details darüber zu erfahren. Mutt ist freie Software.
> Sie können es unter bestimmten Bedingungen weitergeben; starten Sie
> `mutt -vv' für weitere Details.
>
> System: Linux 2.4.16 (i686) [using ncurses 5.2]
> Einstellungen bei der Compilierung:
> -DOMAIN
> +DEBUG
> -HOMESPOOL +USE_SETGID +USE_DOTLOCK +DL_STANDALONE
> +USE_FCNTL -USE_FLOCK
> +USE_POP +USE_IMAP -USE_GSS -USE_SSL +USE_GNUTLS +USE_SASL
> +HAVE_REGCOMP -USE_GNU_REGEX
> +HAVE_COLOR +HAVE_START_COLOR +HAVE_TYPEAHEAD +HAVE_BKGDSET
> +HAVE_CURS_SET +HAVE_META +HAVE_RESIZETERM
> +HAVE_PGP -BUFFY_SIZE -EXACT_ADDRESS -SUN_ATTACHMENT
> +ENABLE_NLS -LOCALES_HACK +COMPRESSED +HAVE_WC_FUNCS
> +HAVE_LANGINFO_CODESET +HAVE_LANGINFO_YESEXPR
> +HAVE_ICONV -ICONV_NONTRANS +HAVE_GETSID +HAVE_GETADDRINFO
> ISPELL="/usr/bin/ispell"
> SENDMAIL="/usr/sbin/sendmail"
> MAILPATH="/var/mail"
> PKGDATADIR="/usr/share/mutt"
> SYSCONFDIR="/etc"
> EXECSHELL="/bin/sh"
> MIXMASTER="mixmaster"
> Um die Entwickler zu kontaktieren, schicken Sie bitte
> eine Nachricht (in englisch) an <mutt-dev@mutt.org>.
> Um einen Bug zu melden, verwenden Sie bitte das Programm flea(1).
>
> patch-1.3.24.rr.compressed.1
> patch-1.3.24.appoct.2
> patch-1.3.15.sw.pgp-outlook.1
> patch-1.3.24.admcd.gnutls.1
> Md.use_editor
> Md.paths_mutt.man
> Md.muttbug_no_list
> Md.use_etc_mailname
> Md.muttbug_warning
> Md.gpg_status_fd
> patch-1.2.xtitles.1
> patch-1.3.23.1.ametzler.pgp_good_sign
>
> >How-To-Repeat:
> >Fix:
> }}}
New description:
When encrypting (with gpg) and having several bccs,
it is encrypted to them all. So the to: and cc: recipients
can see the bcc:ed people.
The Ägypten-Project (adding encryption to kmail) has a similiar problem.
Check their comments on how to solve this:
http://intevation.de/rt/webrt?serial_num=948&display=History
--
Ticket URL: <http://dev.mutt.org/trac/ticket/1090#comment:2>
