Received mail reveals default identity/mail-address
Categories
(Thunderbird :: Message Compose Window, defect)
Tracking
(Not tracked)
People
(Reporter: bugzilla, Unassigned)
Details
(Keywords: privacy)
User Agent: Mozilla/5.0 (X11; Linux x86_64; rv:98.0) Gecko/20100101 Firefox/98.0
Steps to reproduce:
Send a mail from a non-default identity.
Actual results:
In the receiver's inbox the mail is displayed with default identity (name and mail-address). This could be considered a flaw in privacy protection.
The the receiver sees the sender's correct non-default mail-address in the new compose window after hitting reply. But the replied mail in the initial sender's inbox also shows the (wrong) default identity's address.
Expected results:
By no means a receiver should see another mail-address than the one assigned to the identity chosen by the sender.
There are many similar bugs about identity related mail-address display, but none of them covered this explicit case as far as I searched through existing bugs.
After another test, this problem seems to occur especially with non-default identities, that have assigned an address/reply-to of a different domain than the default identity/mailbox.
Example:
Mailbox: myname@mailbox.org
Identity: anothername@somedomain.com
|
||
Comment 2•2 years ago
|
||
Please clarify the steps to reproduce. If the receiver gets a From that is the default, that means you didn't use the non-default identity at all.
That's exactly the point, it changes during the process:
- The sender selects a non-default identity and sends it
- The receiver sees the default-identity when opening/reading the mail
- After hitting reply the new compose window displays the non-default/reply-to mail-address again
- The reply in the initial sender's (1.) inbox shows the default identity's mail-address again.
If I send an email where the 'FROM' email address is a non default account, but that non default account is actually sending using a SMTP server for my default account (different email address), then the headers of the received email do contain data/email address of that default account.
But using 'Reply' will still reply TO the original 'FROM' of non default account.
This has always been the case. The received from states server of default account email address accepts authentication to allow non default email address.
Question : what is the non default account using as it's outgoing server smtp account?
Is the non default account name/email address - the same as the outgoing server smtp username ?
Or is the non default account using the outgoing server smtp of the default account - so account email address is not the same as the outgoing server smtp username ?
I have only one account (aka mailbox). All my non-default identities use the mailaccount's same outgoing smtp server.
And yes, the identity's mail address is not the same as the outgoing server smtp username (see my example above).
I guess I have a rather simple setting. I haven't expanded this to different smtp servers mixed across different account(s) and identities yet.
Additionally in previous replies of an attached conversation in the mail body it also says "[Name] <default-identity mail address> wrote:" - no matter what identity was chosen as a sender before.
So the default identity is also revealed in the mail body. Not good!
...curiously in the reply scenario mentioned in the post before, the correct "non-default-identity" name is displayed next to the "default-identity" mail address.
Is there any information missing to reproduce?
It's pretty annoying to find my default address being potentially displayed to recipients, that are not intended to see it.
All my non-default identities use the mailaccount's same outgoing smtp server.
When you logon to webmail account to view the emails of the non-default email address, do you use the username of that same non default identity and a password?
If yes: Create another outgoing smtp for the non default identity where username is the non default identity email address and assign it to the non default identity.
|
Reporter | |
Comment 10•2 years ago
|
||
I'm not logging on to any webmail account in my scenario. It's all "within Thunderbird". Do I miss something?
On the receiving side all the incoming mails to the non-default address are forwarded to my default address per mail-alias. There is just one inbox (server and Thunderbird).
|
|
Reporter | |
Comment 11•2 years ago
|
||
In other words, I tried to set up my non-default addresses as "virtual" as possible, outgoing via Thunderbird identities and incoming via forwarded mail aliases. Tho me that's what these identities are made for. If I would have a distinct mail-account/inbox for my non-default addresses there wouldn't be any need to create another identity for it.
|
||
Comment 12•2 years ago
|
||
(In reply to bambam from comment #10)
On the receiving side all the incoming mails to the non-default address are forwarded to my default address per mail-alias. There is just one inbox (server and Thunderbird).
So if you logon to the webmail account for main account email address, you see all the emails for all your identities in the one webmail Inbox before they get downloaded.
In downloaded email in Inbox, do you see the 'TO' in those forwarded to emails as only TO your main address?
In effect you only have incoming downloaded mail addressed TO your main address.
Hence when you click on 'Reply' the 'TO' is put into the 'FROM', so it appears you are replying using main email address and then you need to choose an identity.
For the non default identity - in Account Settings > 'Manage Identities' for that identity, have you entered a 'Reply-to' in those emails you send which is for the 'non-default' identity email address.?
Then recipient clicks on reply and the 'Reply-to' email address is used.
You still need to set up an outgoing smtp for the additional non-default identities to stop using the main address as smtp.
In Thunderbird are you using IMAP or POP accounts ?
Are you also getting all your 'Sent' mail (from all identities) in the one 'Sent' folder on server?
At this point I'm not convinced this is a bug.
Set up the outgoing smtp's for each non default identity and assign it to be used by appropriate non- default identity. Stop using the main address as your outgoing server.
For each non default identity - Set up a 'Reply-to' which uses the appropriate non-default identity email address.
|
|
||
Comment 13•2 years ago
|
||
Also check the copy in the Sent folder (there you see what thunderbird sent to the server). Some servers will not allow you to use another email, even if Thunderbird tell them to.
|
|
Reporter | |
Comment 14•2 years ago
|
||
@Anje
Now, I see... I guess, I wasn't precise at one crucial detail, just slightly touching the point in my initial post. I'm sorry about that.
It's not about the "TO" field. The revealed default address is in the compose window, when writing a reply. The cited mail body of the initial non-default's mail content is prefixed by
"On some date at some time wrote [non-default name] <[default mail-address]>:"
|
|
Reporter | |
Comment 15•2 years ago
|
||
And to answer the remaining questions:
All identities have the respective correct reply-address.
I'm using an IMAP account and all sent mails go in the same SENT folder.
|
|
||
Comment 16•2 years ago
|
||
Check the message in the Sent folder. What does the From header say there?
Description
•