jsw
2004-03-02 14:05:22 UTC
Can a skilled hacker extract those bcc'd names/addresses? I can't find
that info in the source view.
As far as I know, no. It's stripped somewhere in the email process.that info in the source view.
Perhaps we can get a definitive answer by referring to the encyclopedia
source of all things internet, the "World According to Winslade."
gram cannot determine the set of addresses contained within the sender's
BCC: lines.
The To: and CC: lines do indicate recipients, and show in the headers,
but they are not the ones that the receiving MTA uses to deliver the
mail to the vict^H^H^H^Hrecipient. The actual recipient is indicated in
the RCPT To: exchange in SMTP or the argument to the rmail command for
uucp (anybody remember that ??)
The BCC: lines are not really stripped, they just aren't sent. ;-) ;-)
ObTrivia: What happens if the sending MTA is in error and sends the BCC:
lines ?? Do they appear in the header of the message in the recipient's
mailbox ?? (Testing this will be an exercise for the studii.)