Timeline for How did I get this email without a "To" field?
Current License: CC BY-SA 3.0
25 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Jan 8, 2023 at 11:15 | answer | added | mattpr | timeline score: 1 | |
| Jan 19, 2018 at 14:03 | comment | added | ilkkachu |
If you look at a message from the sending side, the Bcc header is very likely to be saved. It shouldn't be there for the receiver, though.
|
|
| Jan 18, 2018 at 21:53 | review | Suggested edits | |||
| Jan 19, 2018 at 14:01 | |||||
| Jan 18, 2018 at 21:52 | comment | added | Stevoisiak | Edits should be used to clarify parts of your question, rather than as a self-answer or update. Your update should probably be posted as comment on @luc's answer. | |
| S Jan 18, 2018 at 2:32 | history | suggested | SeanC | CC BY-SA 3.0 |
edited picture to better block email addresses
|
| Jan 18, 2018 at 0:41 | comment | added | David Schwartz | Think of a letter in an envelope. The letter can have any "To" field or no "To" field and it will still get to wherever the envelope is addressed. Alice and mail Bill a letter from Charlie to David if she wants to. | |
| Jan 17, 2018 at 23:11 | review | Suggested edits | |||
| S Jan 18, 2018 at 2:32 | |||||
| Jan 17, 2018 at 16:54 | comment | added | Zach | Just a note: Your attempt to cover the name an email in the "Edit:" image is really not sufficient. Not only is the full lettering not covered, but the covered portions are different in every instance, making a large portion of the text retrievable. | |
| Jan 17, 2018 at 9:59 | comment | added | Chris H |
@ToddWilcox old versions of Thunderbird (or Netscape communicator) needed a seemingly-valid address in the To or CC field, and not just BCCs. This meant BCCing the intended recipients and addressing the email to yourself was a common pattern. This may explain why it was acceptable to some of your users
|
|
| Jan 17, 2018 at 4:41 | answer | added | thomasrutter | timeline score: 39 | |
| Jan 17, 2018 at 1:06 | comment | added | Andrew Leach | Your BCC test is not a good test. You are using GMail, which (a) knows you are the sender (b) may do odd things anyway. To test, you need to send from a different address at the very least -- one which is not yours -- and preferably not use GMail as a client at all. | |
| Jan 17, 2018 at 0:07 | comment | added | Ben Voigt | "I tried to figure out which account was the target" -- The "To" MIME header is useless for that anyway since it is under the control of the untrusted sender, look instead at the Delivered-To header which was attached by your own server. | |
| Jan 16, 2018 at 23:57 | comment | added | CAD97 | My University uses a fake account as the target for mass emailing; the email will have To: Students-Cloud, or something similar. If a company uses blank To fields, it just leads to confusion. | |
| Jan 16, 2018 at 22:18 | history | tweeted | twitter.com/StackSecurity/status/953391141680041984 | ||
| Jan 16, 2018 at 20:36 | answer | added | Serge Ballesta | timeline score: 15 | |
| Jan 16, 2018 at 18:27 | comment | added | YoniXw | @nisarg-shah Similar but different, here in the email source there were no fields what-so-ever that will justify delivering this email to my inbox. | |
| Jan 16, 2018 at 18:17 | comment | added | Todd Wilcox | I've configured spam filters to reject blank To: fields before, so it is possible for spam filters to stop this. The downside is that some legitimate (and IMHO foolish) senders want a blank To: field so they can e-mail a large group of people without exposing all of their addresses to each other. Sometimes I've gotten away with saying they have to put something (like their own address) in the To: field, other places I've been ordered to allow empty "To:" fields through the spam filter. | |
| Jan 16, 2018 at 17:54 | history | edited | YoniXw | CC BY-SA 3.0 |
added 228 characters in body
|
| Jan 16, 2018 at 15:46 | vote | accept | YoniXw | ||
| Jan 16, 2018 at 14:51 | answer | added | Luc | timeline score: 89 | |
| Jan 16, 2018 at 14:24 | comment | added | Nisarg Shah | Similar question on Superuser: Why is my own e-mail address not listed in the To field? | |
| Jan 16, 2018 at 14:12 | vote | accept | YoniXw | ||
| Jan 16, 2018 at 15:46 | |||||
| Jan 16, 2018 at 14:00 | answer | added | Mirsad | timeline score: 18 | |
| Jan 16, 2018 at 13:55 | review | First posts | |||
| Jan 16, 2018 at 13:58 | |||||
| Jan 16, 2018 at 13:51 | history | asked | YoniXw | CC BY-SA 3.0 |