I have a web application where users register and are activated via an email sent to the email address they supplied.
Then there are pages that are only visible to registered users (non-user access is restricted by checking for a User Object in the session).
On these restricted pages I would like to display a listing that includes the email addresses of other users.
Do I still need to take precautions to obfuscate the email addresses so that they are protected from spam bots and the like? Or is it enough that the page isn't accessible to non-authenticated users?
Edit: The emails on my site are not particularly valuable and it is not a site with very sensitive material. I just don't want the users to be bothered with spam.