MoinMoin: FeatureRequests/SpecifyRealMailToAddress

Short description

Currently, MoinMoin puts sender's e-mail address to the 'To:' field of the message. This is not good, because spam filters and some mailing list software will tend to treat such messages as (at least) suspicious.

The attached patch adds administrator-adjustable option to specify destination addresses in the 'To:' field. There is the simular feature request, FeatureRequests/UseToWhenMailingInsteadOfBCC, it achieves the same functionality, but invoking mailer a number of times.

1.6.3-sendmail-expand-to.patch 1.7.2-sendmail-expand-to.patch

I reject this due to privacy issues:

Moin is being careful not to disclose email addresses and putting all of them into "To:" is definitely not what we want.

I see that this is, in some situations, not a problem (e.g. for a company intranet wiki where everybody knows everbody else' email anyway).

But we always have to look at the generic case also:

• assume that at least 1 user does not want his email disclosed
• assume that the wiki admin might not be aware of the privacy problem and has configured expand_mailto = True due to other reasons

• every email address of subscribed users will be disclosed to every other subscriber of same page

Further, even if email address privacy is not an issue, there is another thing that will go wrong:

• assume that some recipients' will be infected with viruses, trojans and spyware
• that kind of malware is often used by spammers
  • to do the spamming
  • to collect data (like email addresses) for spamming

• every email address of subscribed users will likely be disclosed to spammers sooner or later

CategoryFeatureRejected