[Mailman-Users] non-subscribers getting through--email address in "Real Name"

[Mark Sapiro]

On 07/19/2018 03:55 PM, Matt Morgan wrote:
> BTW I'm kind of flummoxed that in Mark's mail he sees the
> jgl at johngreenwaltlee.com address, because that's exactly what I deleted and
> replaced with the obfuscated "xxxjohnxxx.com." In what I wrote, that real
> email address *did not appear*. !@#$% gmail.


It appeared to me that those addresses in both the From: and Reply-To:
headers were artifacts of some MUA. I didn't want to say anything about
that because I didn't want to draw attention to something you were
probably trying to not expose.

I suspect the following scenario is responsible:

You compose an email using an HTML (rich-text) editor. The editor
represents 'user at example.com' as '<a
href="mailto:user at example.com">user at example.com</a>' in the raw html it
is composing. I.e., it is a hyperlink.

You obfuscate the address to 'other at other.example.com'. This changes the
html to '<a href="mailto:user at example.com">other at other.example.com</a>'
so you see 'other at other.example.com' in your composition window, but it
is still a mailto link to 'user at example.com'

You send the message and your MUA creates a plain text alternative in
which the html hyperlink is rendered as 'other at other.example.com
<user at example.com>'.

The list's content filtering selects the plain text alternative for
delivery to the list.

I tell my users to ALWAYS compose list mail using a plain text editor.
That way you see what will actually go to the list. In this case, Gmail
thwarted your intent. I have users on my lists that use Yahoo and drag
and drop links into their posts and the links don't appear in the plain
text at all.

-- 
Mark Sapiro <mark at msapiro.net>        The highway is for gamblers,
San Francisco Bay Area, California    better use your sense - B. Dylan