[sr #110592] Privacy: Please don't include IP and UserAgent in email headers

[Bob Proulx]

Update of sr #110592 (project administration):

                  Status:                 Invalid => None                   
             Open/Closed:                  Closed => Open                   

    _______________________________________________________

Follow-up Comment #3:

Oh sorry.  I thought you were talking about the mailing list archives which
log this.  For example this one from me.  Have no control over this.

https://lists.gnu.org/archive/html/savannah-users/2021-10/msg00006.html

I must admit I always thought displaying that in the mailing list archives
seemed rather silly.  But many of those things were done due to problems with
abuse and therefore things were added as an anti-abuse mechanism.  I can't
think of any good use for the User-Agent though.  And of course it may be set
to anything.  I consider it untrusted data from user input.

The Savannah web UI is Savane and that sending code is of course this.

https://git.savannah.gnu.org/cgit/administration/savane.git/tree/frontend/php/include/sendmail.php#n28

It mentions a "spamcheck" so this would need to be considered.  Therefore it
is probably there as an anti-abuse measure.

I'll open the ticket again and see what the others think.  I am inclined to
reduce the included information.  However I am swamped with other problems
that are urgently calling for my attention.  Patches sent to
savannah-hackers-public AT gnu.org for discussion are welcomed.


    _______________________________________________________

Reply to this item at:

  <https://savannah.nongnu.org/support/?110592>

_______________________________________________
  Message sent via Savannah
  https://savannah.nongnu.org/