[sr #110592] Privacy: Please don't include IP and UserAgent in email headers

Follow-up Comment #7, sr #110592 (project administration): Thanks for making that change removing User-Agent. I think it makes a lot of sense. It's an arbitrary untrusted user supplied data string. Not propagating that seems like a good thing to me. As to trying to hide email addresses... I h

Re: [sr #110592] Privacy: Please don't include IP and UserAgent in email headers

writes: > Follow-up Comment #6, sr #110592 (project administration): > Thank you :) > The other thing I just recognized is that all the recipients are listed within > the To: header. Maybe the frontend could instead use BCC to make it impossible > to harvest private mail addresses by just addin

[sr #110592] Privacy: Please don't include IP and UserAgent in email headers

Follow-up Comment #6, sr #110592 (project administration): Thank you :) The other thing I just recognized is that all the recipients are listed within the To: header. Maybe the frontend could instead use BCC to make it impossible to harvest private mail addresses by just adding an own address to

[sr #110592] Privacy: Please don't include IP and UserAgent in email headers

Update of sr #110592 (project administration): Status:None => Done Assigned to:None => ineiev Open/Closed:Open => Closed ___

[sr #110592] Privacy: Please don't include IP and UserAgent in email headers

Follow-up Comment #4, sr #110592 (project administration): I don't see a point in the whole "# User details." block. If the savannah frontend has been used to create spam in the past it should be catched before actually sending the mail (limiting notifications for new users, denying them to add m

[sr #110592] Privacy: Please don't include IP and UserAgent in email headers

Update of sr #110592 (project administration): Status: Invalid => None Open/Closed: Closed => Open ___ Follow-up Comment #3: Oh sorry. I

[sr #110592] Privacy: Please don't include IP and UserAgent in email headers

Follow-up Comment #2, sr #110592 (project administration): I am talking about the notification emails sent from savannah.gnu.org and savannah.nongnu.org. Including the email just sent by this very comment and the email I got to notify me about your comment. I should have mentioned that before. So

[sr #110592] Privacy: Please don't include IP and UserAgent in email headers

Update of sr #110592 (project administration): Status:None => Invalid Open/Closed:Open => Closed ___ Follow-up Comment #1: The mailing

[sr #110592] Privacy: Please don't include IP and UserAgent in email headers

URL: Summary: Privacy: Please don't include IP and UserAgent in email headers Project: Savannah Administration Submitted by: consolatis Submitted on: Sat 01 Jan 2022 04:53:04 AM UTC