[liberationtech] Thunderbird's Bug

[Sacha van Geffen]

Can you explain the steps to repeat this behavour,
Be aware that the smtp settings and your identity settings are not
strictly linked. So try to be more verbose on steps you do and if you
are able to provide some headers of the mails that are sent out that
would be helpful too.

Cheers, Sacha


On 04/14/2015 01:10 PM, Amin Sabeti wrote:
> Hi folks,
> 
> It seems Thunderbird has a dangerous bug that can put people in risk.
> 
> I have 5 various Gmail accounts on Thunderbird. Each Gmail address use
> its own Outgoing Server (SMTP). It means I have 5 smtp.googlemail.com
> <http://smtp.googlemail.com>. But for some reasons, SMTP for one Gmail
> ccount has been changed from the correct SMTP to another one.
> Consequently, if I don't check SMTP of my account on Thunderbird, the
> email will send through another email address to the recipient. For
> instance, I'd like to send an email from aminsabeti [at] gmail [dot] com
> to someone, if the SMTP has been changed, I think I'm sending my email
> via aminsabeti while the recipient will see from another email on my
> Thunderbird such as xyz at gmail.com <mailto:xyz at gmail.com>!
> 
> I hope my explanation is clear. This bug can be dangerous when people
> have their real email address and pseudonym email address on Thunderbird
> which has happened more than 10 times for me.
> 
> I hope someone from Thunderbird is here and can fix this annoying bug
> which can be risky for people who live in some countries such as Iran.
> 
> Cheers,
> 
> Amin
> 
> 


-- 
Greenhost - Sustainable Hosting
T: +31204890444
info at greenhost.nl
https://greenhost.nl/

A digital signature can be attached to this e-mail,
you need opengpg software to verify it. see:
http://tinyurl.com/openpgp-manual

Key fingerprint = 4F15 CE56 36AB A1C2 0D81  BE10 E12B B435 F2D5 2E48