Re: [Full-Disclosure] a question about e-mails

[maarten <fulldisc@xxxxxxxxxxxx>]

On Thursday 26 February 2004 10:02, Sandeep Sengupta wrote:
> Hi,
>
> Do a "REPLY ALL" (MS Outlook/express)
> All the email ids in TO, CC, BCC will be displayed. I hope this helps. Good
> luck :-)

Well, that would defeat the whole purpose of the BCC: field, now wouldn't it ?
In other words, no that will NOT list the original BCC: field recipients.

I think it is safe to assume that the people who drafted the RFC did their 
homework and it logically follows that there is (absolutely) no way to 
retrieve the original BCC entries (not even by the receiving smtp admin).

If that were not the case, that would mean using BCC has a hole in it big 
enough to drive a truck through...  and we would have heard about it.

Maarten

> Warm regards,
> Sandeep.
>
> -----Original Message-----
> From: ASLI Unur [mailto:aunur@xxxxxxxxxxxxx]
> Sent: Thu 26/02/2004 21:15
> To:   security_basics@xxxxxxxxxxxxxxxxx; full-disclosure@xxxxxxxxxxxxxxxx
> Cc:
> Subject:      [MAYBE SPAM] [Full-Disclosure] a question about e-mails
> Hi
> I have a question for it experts. I want to learn if there is any way of
> understanding/finding the e-mail addresses at BCC part on an e-mail that is
> send to you.
>
> Thanks for your consideration.

-- 
Yes of course I'm sure it's the red cable. I guarante[^%!/+)F#0c|'NO CARRIER

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html