Gandi.net Groups

Mail General: Gandi Secure SSL/IMAP email privacy issues

You should be logged in to post new messages. Create an account.

We're using Gandi for email, and IMAP with SSL. We have several domains
with Gandi. However there is a privacy issue:

Current behaviour of Gandi mail: log in to account securely, send mail,
mail shows recipient not your domain/gandi IP but your actual IP of the
computer you are sending from.

Expected behaviour of Gandi mail: log in to account securely, send mail,
mail shows recipient your domain/gandi IP as source (since after all
that is what we are paying for and it identifies us clearly in case of
abuse).

Even Yahoo or Gmail do not do this, the headers do not show the IP of
the sender. In the event of abuse of course they can reveal from their
logs. IN the case of Gandi domain/email owners, the identity would
already be clear from the domain, so please can this be fixed.

The same should apply when using the web interface hosted at Gandi.
Hello,
Even Yahoo or Gmail do not do this, the headers do not show the IP of
the sender.
Yes, but I do not see the problem...
\o/ Jonathan
  Gandi.Net
On Mar, 19 2008 14:00 CET, Jonathan (Gandi) wrote:
Yes, but I do not see the problem...
The problem is that it exposes your computer's IP address, which you may
not want revealed to everyone. Personally, I think having your own IP
address in the headers isn't a big deal, but other people might.
I tried this and both Gmail and Yahoo (at least in the free webmail
versions) do list the IP address of the sender in the headers.  See

http://groups.gandi.net/en/topic/gandi.en....



--M.

On Mar, 17 2008 17:07 CET, UNITEL wrote:
We're using Gandi for email, and IMAP with SSL. We have several
domains
with Gandi. However there is a privacy issue:

Current behaviour of Gandi mail: log in to account securely, send
mail,
mail shows recipient not your domain/gandi IP but your actual IP of
the
computer you are sending from.

Expected behaviour of Gandi mail: log in to account securely, send
mail,
mail shows recipient your domain/gandi IP as source (since after all
that is what we are paying for and it identifies us clearly in case of
abuse).

Even Yahoo or Gmail do not do this, the headers do not show the IP of
the sender. In the event of abuse of course they can reveal from their
logs. IN the case of Gandi domain/email owners, the identity would
already be clear from the domain, so please can this be fixed.

The same should apply when using the web interface hosted at Gandi.