pulb / mailnag

An extensible mail notification daemon
GNU General Public License v2.0
250 stars 32 forks source link

mailnag leaks user's IP address to Google without asking for consent #225

Open knurd opened 2 years ago

knurd commented 2 years ago

mailnag's connectivity check is hard-coded to use 'www.google.com' and thus leaks user's IP address to Google without asking for consent. This was reported as a bug in Fedora and I agree that the reporter has a point: https://bugzilla.redhat.com/show_bug.cgi?id=1983624

The reporter's in a later comment "Note that being able to reach www.google.com is irrelevant to being able to reach one's mail server." also has a point IMHO.

FWIW: I'll patch that behaviour in Fedora to make it ping fedoraproject.org, as that what is NetworkManager is doing as well. Not perfect IMHO, but better than google.