[Top] [All Lists]

Re: [ietf-smtp] [Shutup] Proposed Charter for the "SMTP Headers Unhealthy To User Privacy" WG (fwd)

2015-11-29 17:13:16
Not 100%. Contrast that with the message I sent to the list a few
minutes ago:

You're confusing SMTP and submission.

This is an SMTP received header, which tells us that you use to send mail from your address, which doesn't strike me as much of a privacy leak.

Received: from ( [IPv6:2607:f2f8:a994::2])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by (Postfix) with ESMTPS id 1551C1B3847;
Sun, 29 Nov 2015 14:53:43 -0800 (PST)

This is a submission header. It does indeed have an IP address, but all th address 2001:470:1f05:bfe:a06d:6a7c:4078:aebf tells anyone is that you use a v6 tunnel from Hurricane Electric, the endpoint of which can be anywhere.

Received: from [IPv6:2001:470:1f05:bfe:a06d:6a7c:4078:aebf]
([IPv6:2001:470:1f05:bfe:a06d:6a7c:4078:aebf]) (authenticated bits=0)
by (8.14.3/8.14.3/Debian-9.4) with ESMTP id tATMrfPA024552
(version=TLSv1/SSLv3 cipher=DHE-RSA-AES128-SHA bits=128 verify=NO);
Sun, 29 Nov 2015 14:53:42 -0800

Chris Newman's short proposal addresses this in the cases where (unlike you) the IP tells you something about the location of the user.

John Levine, johnl(_at_)taugh(_dot_)com, Taughannock Networks, Trumansburg NY
Please consider the environment before reading this e-mail.

ietf-smtp mailing list

<Prev in Thread] Current Thread [Next in Thread>