电子邮件标头中包含敏感信息?
如果删除了“收件人:电子邮件”,电子邮件标头中是否存在任何敏感信息?
我问这个问题的原因是因为我正在启动一个项目(像许多其他项目一样)来记录收到的垃圾邮件。我计划发布标题(删除我的电子邮件和姓名)。
所以我想知道是否有垃圾邮件发送者(或其他任何人)可以根据标题内容检索私人信息
?
If the to: email is removed, is there any senstive information in an email header?
The reason I ask is because I am starting a project (like many others) to document received spam. I plan to publish the headers (with my email and name removed).
So I am wondering if there is anyway spammers (or anyone else) could possible retrieve private information based on the header content
Thoughts?
如果你对这篇内容有疑问,欢迎到本站社区发帖提问 参与讨论,获取更多帮助,或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱,如果其他用户或者作者回复了您的评论,将不能在第一时间通知您!
发布评论
评论(1)
嗯,有路由路径 -
Received
标头显示哪些服务器中继了它,以及它们的 IP 地址。如果您担心在那里暴露 DNS 名称和 IP 地址,您可能需要将其删除。还有Message-ID
,它在源服务器上应该是唯一的,但在这种情况下并不真正相关:因此,最相关的部分将是路由数据 - 除非您使用托管服务您可以隐藏在人群中(例如gMail),这可以用来猜测收件人的域名。
Well, there's the routing path - the
Received
headers show which servers relayed it, together with their IP addresses. If you are worried about exposing DNS names and IP addresses there, you may want to remove them. There's alsoMessage-ID
, which should be unique at the origin server, but that is not really relevant in this case:So, the most relevant part would be the routing data - unless you use a hosted service where you can hide in the crowd (e.g. gMail), this could be used to guess the domain of the recipient.