[Bug 297934] New: BCC is not removed when attaching messages

[John Zaitseff]

https://bugs.kde.org/show_bug.cgi?id=297934

            Bug ID: 297934
          Severity: major
           Version: 4.7
          Priority: NOR
          Assignee: kdepim-bugs at kde.org
           Summary: BCC is not removed when attaching messages
    Classification: Unclassified
                OS: Linux
          Reporter: j.zaitseff at zap.org.au
          Hardware: Ubuntu Packages
            Status: UNCONFIRMED
         Component: general
           Product: kmail2

User-Agent:       Mozilla/5.0 (X11; Linux) KHTML/4.8.2 (like Gecko)
Konqueror/4.8
Build Identifier: 

If you attach one or more previously-written messages to one that you are
composing, the BCC field in those attached messages are not removed: a major
privacy violation.


Reproducible: Always

Steps to Reproduce:
1. Create a new message using composer.
2. Write some arbitrary text (optional)
3. Drag and drop a previously-written message (that has a BCC field in it) into
the new message.
4. Send the message, even if only to yourself.
5. Verify that the attached message retains the BCC field.
Actual Results:  
The BCC field in the attached messages (MIME type message/rfc822) is not
removed.

Expected Results:  
The BCC field in all attached messages should be removed, the same as the BCC
field of the final message itself is removed when sending.

I believe that this is a major privacy violation: the BCC field is expected to
remain private, and there is no indication that that might not be the case. 
Furthermore, there is no way to edit dragged-and-dropped attached messages (at
least, that I am aware of, short of manually saving the complete message as a
draft, then editing that outside of kmail2/kontact).

-- 
You are receiving this mail because:
You are the assignee for the bug.