769461 - Return receipt is sent automatically for Exchange

Status: RESOLVED DUPLICATE of bug 561970

(Thunderbird :: Mail Window Front End, defect)

Description

[Lucius Chiaraviglio]

Attachment: Example message with which bug can be seen.eml

User Agent: Mozilla/5.0 (Windows NT 5.1; rv:13.0) Gecko/20100101 Firefox/13.0.1
Build ID: 20120614114901

Steps to reproduce:

Receive a message with a bad return Disposition-Notification-To field such as in the attachment (vendor advertising, so no privacy worries).  The bad Disposition-Notification-To field causes a mail server error when a return receipt is sent -- as expected, but necessary for this bug to be visible (normally it would be invisible unless you specifically did a test with somebody on the other end telling you when they got the return receipt).


Actual results:

The return receipt was sent as soon as I looked at the message (resulting in the mail server generating an error about an invalid address), even though the "Ignore" and "Send Return Receipt" buttons also popped up between the message and its header.


Expected results:

The return receipt should not be sent until the user presses "Send Return Receipt" (which does work almost normally except for still exhibiting Bug 483760).

Note that older versions of Thunderbird did not send the Return Receipt without user intervention, so this is a relatively new bug; a message on 2012-03-28 from the same vendor (with the same bad Disposition-Notification-To field) did not have this problem, so this bug appeared in some version of Thunderbird released after that.

Comment 1

[Lucius Chiaraviglio]

Note:  Currently using Thunderbird 13.0.1 (the latest released version).

Comment 2

[Magnus Melin [:mkmelin]]

Couldn't reproduce with that msg, but trying to send between two accounts reproduced! BUT, it's not a MDN generated by thunderbird, but one generated by the Microsoft Exchange Server. (The source has <meta name=3D"Generator" content=3D"Microsoft Exchange Server">)

Exchange Server bug? My Settings (on Outlook Web Access) are also set to ask.

Comment 3

[Magnus Melin [:mkmelin]]

Hmm, i found bug 561970

Comment 4

[Magnus Melin [:mkmelin]]

Apparently Microsoft considers this a feature! http://technet.microsoft.com/en-us/library/cc296568%28EXCHG.80%29.aspx
This must be the dumbest thing i've read in ages, not to mention a huge privacy loophole.

Comment 5

[Lucius Chiaraviglio]

Agree on your comment; left a comment on Microsoft's page, although I'm sure that they won't listen.  Probably should mark this as a duplicate of bug 561970, unless somebody can figure out a workaround for Thunderbird to trick the Exchange server into not doing this.  I would ask our IT if they recently upgraded to Exchange server 2007 (they have been upgrading some mail server stuff), but their help desk doesn't have the greatest awareness of what is actually going on there.  :-(