search

sabre-io / Baikal

Baïkal is a Calendar+Contacts server
https://sabre.io/baikal/
GNU General Public License v3.0
2.44k stars 282 forks source link

BBC Mail-Header #1198

Closed cptsanifair closed 1 year ago

cptsanifair commented 1 year ago

Baikal version: 0.93

Actually i have the Problem that baikal sends mails with the "to" header in any case. For a single participant its acceptable, but for multiple participant its a data leak.

Baikal should: a) make a different between one or more invitees and switch from "to" to "bcc" b) send mails only with bcc header

Problem you are having: data leak by inviting multiple participant, because of mail-header "to" Mail Addresses are visible to all participants.

Suggested solution: Mail-Header bcc if more than one participant

ByteHamster commented 1 year ago

The event contains all the email addresses anyway, you can see them in the calendar app. That's how event invitations work. So the email does not leak anything.