To: field contains more than one whitespace after first colon when message sent without name

NEW
Unassigned

Status

MailNews Core
Composition
--
major
14 years ago
10 months ago

People

(Reporter: Jubal Kessler, Unassigned)

Tracking

({privacy})

Trunk
privacy

Firefox Tracking Flags

(Not tracked)

Details

(Reporter)

Description

14 years ago
User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.7b) Gecko/20040311
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.7b) Gecko/20040311

The To: field contains more than one whitespace after the first colon, in the
specific case where a full name ("Jubal Kessler" <jubal@sendmail.com>) is *not*
included.

This seems at first like a cosmetic issue, but turns out to have ramifications
for Yahoo!'s DomainKeys anti-spam initiative, which basically creates a digital
signature based on the entire message -- including the To: field.

If Thunderbird creates a message with a To: containing more than one whitespace,
then an MTA strips the leading whitespace, the digital signature becomes invalid.

Reproducible: Always
Steps to Reproduce:
1. Enable DomainKeys signing on the MTA.
2. Use this MTA as a client relay.
3. Send mail to user@host.name without using a full name.

Actual Results:  
DomainKeys signature becomes invalid.

Expected Results:  
Thunderbird should strip the leading whitespace, preventing DomainKeys from failing.

Comment 1

14 years ago
Reproduced with TB 0.7, Moz 1.8a3-0824, Win2K
Assignee: mscott → sspitzer
Severity: normal → minor
Status: UNCONFIRMED → NEW
Component: General → Composition
Ever confirmed: true
Product: Thunderbird → MailNews
Version: unspecified → Trunk

Comment 2

14 years ago
*** Bug 246119 has been marked as a duplicate of this bug. ***

Comment 3

14 years ago
*** Bug 266057 has been marked as a duplicate of this bug. ***
Product: MailNews → Core

Comment 4

11 years ago
This bug is still present in 2.0b1, nearly 3 years after initially reported!  I found it the same way Jubal did, after some pain.  I wonder how many Thunderbird users tried playing with DK and gave up in frustration because of this stupid little bug?

Comment 5

11 years ago
same on current trunk.
within rfc822 spec, but still a privacy issue at the receiving end, no?
Assignee: sspitzer → nobody
Severity: minor → major
Keywords: privacy
QA Contact: composition
Summary: To: field contains more than one whitespace after first colon → To: field contains more than one whitespace after first colon when message sent without name
(Assignee)

Updated

10 years ago
Product: Core → MailNews Core

Comment 6

10 months ago
I tested this:
1. input only an email address in the to field
2. save as draft
3. view the source of the draft

No extra whitespace after To:

Did I test it correctly?

Thunderbird 52.0.1 (32-bit)
Windows 7 64-bit
You need to log in before you can comment on or make changes to this bug.