bug#18718: Encrypted messages expose Bcc identities

[Lars Ingebrigtsen]

Jens Lechtenboerger <jens.lechtenboerger@fsfe.org> writes:

> 4. Send an encrypted e-mail to yourself, with one To address and one
>    Bcc address.  Read the mail received under the To address, where
>    you should not be able to identify the Bcc recipient.
>    Note that buffer *epg-debug* mentions that the message was
>    encrypted to two keys (including both key IDs and e-mail
>    addresses).  The Bcc recipient is clearly visible.

[...]

> On 2014-09-21 I posted some suggestions to the ding mailing list
> concerning my package DefaultEncrypt, which contains a workaround.

Would it be possible for you to create a patch for this against the
version of Message in 25.1?

-- 
(domestic pets only, the antidote for overdose, milk.)
   bloggy blog: http://lars.ingebrigtsen.no