Rails - Jan 2007 - bcc's visible in message? using actionmailer and smtp

Hey everyone,

I''m not highly skilled in email processing.

I noticed that bcc email address are actually visible in the body of an
email message.

Here is a portion of the source of the message. I''ve tried to obfuscate
parts to protect privacy. If I need to provide more so that you can
diagnose this problem, please let me know. I''ve changed the domain to
exampledomain.com.

Received: from localhost ([127.0.0.1] helo=localhost.localdomain)
	by beta.eblock.net with esmtp (Exim 4.63)
	(envelope-from
<example-CdcqGVlosnhWVPTZF4YnfwC/G2K4zDHf@public.gmane.org>)
	id 1H9IdS-0007W7-Ik; Tue, 23 Jan 2007 02:12:14 -0800
Date: Tue, 23 Jan 2007 02:12:14 -0800
From: "Mr. Example"
<example-CdcqGVlosnhWVPTZF4YnfwC/G2K4zDHf@public.gmane.org>
Message-Id:
<45b5df7e79b40_70e01577a3d617501f6-vSqvF+E37n1tY4G3AigAkfmra21iHvyA32JXJilfNos@public.gmane.org>
Subject: What''s New Today
Content-Type: text/html; charset=utf-8
Apparently-To: <railsinator-Re5JQEeQqe8AvxtiuMwx3w@public.gmane.org>
Apparently-To: <bogus_email-Re5JQEeQqe8AvxtiuMwx3w@public.gmane.org>



Note the "Apparently-To" lines. These addresses were provided to the
mailer as bcc''s.

  def notification(mh_data, oec_data, ocn_data, addresses, sender,
sent_at = Time.now)
    subject       ''What\''s New Today''
    body          :mh_data=>mh_data, :oec_data=>oec_data,
:ocn_data=>ocn_data
    bcc           addresses
    from          sender
    sent_on       sent_at
    content_type  "text/html"
  end


Is there a way to hide the bcc addresses?

Thanks,

-Kelly


--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups
"Ruby on Rails: Talk" group.
To post to this group, send email to
rubyonrails-talk-/JYPxA39Uh5TLH3MbocFFw@public.gmane.org
To unsubscribe from this group, send email to
rubyonrails-talk-unsubscribe-/JYPxA39Uh5TLH3MbocFFw@public.gmane.org
For more options, visit this group at
http://groups.google.com/group/rubyonrails-talk?hl=en
-~----------~----~----~----~------~----~------~--~---

On Jan 23, 2:40 pm, railsina...-Re5JQEeQqe8AvxtiuMwx3w@public.gmane.org
wrote:
> I noticed that bcc email address are actually visible in the body of an
> email message.
[snip]
>
> Note the "Apparently-To" lines. These addresses were provided to
the
> mailer as bcc''s.
>
>   def notification(mh_data, oec_data, ocn_data, addresses, sender,
> sent_at = Time.now)
>     subject       ''What\''s New Today''
>     body          :mh_data=>mh_data, :oec_data=>oec_data,
> :ocn_data=>ocn_data
>     bcc           addresses
>     from          sender
>     sent_on       sent_at
>     content_type  "text/html"
>   end
>
> Is there a way to hide the bcc addresses?
You need to provide at least a "to" otherwise it will expose the
bcc''s.
 Often people will use their own "no-reply" address as both the from
and the to, when you need to hide the bccs.

Eric


--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups
"Ruby on Rails: Talk" group.
To post to this group, send email to
rubyonrails-talk-/JYPxA39Uh5TLH3MbocFFw@public.gmane.org
To unsubscribe from this group, send email to
rubyonrails-talk-unsubscribe-/JYPxA39Uh5TLH3MbocFFw@public.gmane.org
For more options, visit this group at
http://groups.google.com/group/rubyonrails-talk?hl=en
-~----------~----~----~----~------~----~------~--~---

Thanks very much. That solved the problem.

-Kelly

On Jan 26, 9:35 pm, "Eric Nielsen"
<EricDNiel...-Re5JQEeQqe8AvxtiuMwx3w@public.gmane.org>
wrote:
> On Jan 23, 2:40 pm, railsina...-Re5JQEeQqe8AvxtiuMwx3w@public.gmane.org
wrote:
>
>
>
> > I noticed that bcc email address are actually visible in the body of
an
> > email message.
> [snip]
>
> > Note the "Apparently-To" lines. These addresses were
provided to the
> > mailer as bcc''s.
>
> >   def notification(mh_data, oec_data, ocn_data, addresses, sender,
> > sent_at = Time.now)
> >     subject       ''What\''s New Today''
> >     body          :mh_data=>mh_data, :oec_data=>oec_data,
> > :ocn_data=>ocn_data
> >     bcc           addresses
> >     from          sender
> >     sent_on       sent_at
> >     content_type  "text/html"
> >   end
>
> > Is there a way to hide the bcc addresses?
>
> You need to provide at least a "to" otherwise it will expose the
bcc''s.
>  Often people will use their own "no-reply" address as both the
from
> and the to, when you need to hide the bccs.
>
> Eric

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups
"Ruby on Rails: Talk" group.
To post to this group, send email to
rubyonrails-talk-/JYPxA39Uh5TLH3MbocFFw@public.gmane.org
To unsubscribe from this group, send email to
rubyonrails-talk-unsubscribe-/JYPxA39Uh5TLH3MbocFFw@public.gmane.org
For more options, visit this group at
http://groups.google.com/group/rubyonrails-talk?hl=en
-~----------~----~----~----~------~----~------~--~---