search

mozilla / fx-private-relay

Keep your email safe from hackers and trackers. Make an email alias with 1 click, and keep your address to yourself.
https://relay.firefox.com
Other
1.46k stars 175 forks source link

Outlook exposes FXA email in quoted text after a reply. #1377

Open JC-Support opened 2 years ago

JC-Support commented 2 years ago

A customer was able to reproduce this by sending an email from a Yahoo address to a masked Outlook email address. They noted that the masked email to the Yahoo email address in the quoted part of the reply.

  1. Send an email to masked Outlook mozmail alias from a Yahoo email address.
  2. Reply to the Yahoo email from the masked Outlook web email
  3. On Yahoo, observe the quoted text of the response.

Result: The masked outlook email address is visible in the quoted text section.

groovecoder commented 2 years ago

Thanks for filing with STR!