Kari Hurtta wrote:
If mail have just one envelope recipient and
that is copied to "for" clause, that does not disclose
possible Bcc: recipients (only possible BCC recipient
for that copy of mail is just that recipient of mail.)
This is what Sendmail does by default, I believe. It only includes
the for clause if there's one envelope recipient.
However, it could still be an information leak if the single envelope
recipient is a mailing list. For example:
Received: ... for
<unsuspecting_people_to_be_fired_in_two_weeks(_at_)example(_dot_)org>
Contrived, I know. :-)
Regards,
David.