[Bug 289339] New: Sending mail with BCC recipients sends the BCC header to all recipients

[John Zaitseff]

https://bugs.kde.org/show_bug.cgi?id=289339

           Summary: Sending mail with BCC recipients sends the BCC header
                    to all recipients
           Product: kmail2
           Version: 4.7
          Platform: Ubuntu Packages
        OS/Version: Linux
            Status: UNCONFIRMED
          Severity: normal
          Priority: NOR
         Component: general
        AssignedTo: kdepim-bugs at kde.org
        ReportedBy: j.zaitseff at zap.org.au


Version:           4.7 (using KDE 4.7.3) 
OS:                Linux

Sending an e-mail in KMail 4.7.4 (and possibly in earlier versions) with BCC
recipients sends an e-mail with the BCC header included to all recipients. 
This is quite a bad breach of privacy, as it allows all recipients (including
BCC and non-BCC recipients) to see who was on the BCC list!


Reproducible: Always

Steps to Reproduce:
1. Create a new e-mail (New Message).
2. Set the To field to, say, test1 at example.com, and the BCC field to, say,
test2 at example.com (real e-mail addresses should be used).
3. Send the e-mail.
4. Read the e-mail sent to either test1 at example.com or test2 at example.com.


Actual Results:  
The BCC field is part of the e-mail sent to both test1 at example.com and
test2 at example.com.

Expected Results:  
The BCC field should NEVER be sent as part of an e-mail, although it SHOULD be
stored in the locally-saved version in the sent-mail folder.


The "Steps to Reproduce" were performed on both my normal account (which has
been using KDE for a number of major releases), as well as a test account which
was completely fresh: no .kde/.local/.config directories.

I suspect the bug might be in akonadi_maildispatcher_agent, but that is just a
wild guess...

-- 
Configure bugmail: https://bugs.kde.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.