You are viewing a plain text version of this content. The canonical link for it is here.
Posted to bugs@httpd.apache.org by bu...@apache.org on 2009/03/31 19:05:36 UTC

DO NOT REPLY [Bug 46946] New: mod_mbox shows email addresses in plain text

https://issues.apache.org/bugzilla/show_bug.cgi?id=46946

           Summary: mod_mbox shows email addresses in plain text
           Product: Apache httpd-2
           Version: 2.2.9
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: normal
          Priority: P2
         Component: mod_mbox
        AssignedTo: bugs@httpd.apache.org
        ReportedBy: rmann@latencyzero.com


Although it makes some effort to obscure the poster's email address in the
pretty view (cf
http://mail-archives.apache.org/mod_mbox/maven-users/200502.mbox/%3c20050228214907.GA23206@vasili.rlf.org%3e),
it doesn't obscure email addresses in the body (in-reply references), and it
obscures nothing in the "view raw message" link. And, for some reason, although
I accidentally posted from a non-subscribed address, the maven list accepted my
message, and now my private email is being harvested by spammers.

-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org


DO NOT REPLY [Bug 46946] mod_mbox shows email addresses in plain text

Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=46946


Dan Poirier <po...@pobox.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |NEEDINFO




--- Comment #1 from Dan Poirier <po...@pobox.com>  2009-06-10 11:36:35 PST ---
It seems like a spam address collector could just follow the link to the raw
message
(http://mail-archives.apache.org/mod_mbox/maven-users/200502.mbox/raw/%3C20050228214907.GA23206@vasili.rlf.org%3E)
and grab the email address from that, no?

-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org