5
BCC header missing in Sent Items (Outlook EAS)
Problem reported by FlexWS - September 29, 2014 at 4:49 AM
Submitted
When you have sent an e-mail to many people via the BCC field, you can not take look later on to see who you mailed to. The BCC field is not shown in the headers of a sent item in Outlook.
Can the BCC field be added to the viewable headers for sent items?
 
I'm missing this in EAS accounts, not sure for SMTP but if it's missing there too it would be nice to add it there too, I think.

8 Replies

Reply to Thread
0
Bruce Barnes Replied
September 29, 2014 at 6:12 AM
Section 2.1.7 of RFC 4021 specifically mandates that BCC information shall NOT be disclosed.   This is defined in RFC RFC 822.
 
The disclosure of BCC fields is prohibited by the International Engineering Task Force. (IETF)
 
The IETF sets the standards by which the Internet and e-mail operates.  For more information on the IETF, or to join, and participate in the setting of those standards, see: www.IETF.org
 
Here is the explanation of the IETF standard which prohibits BCC fields from being disclosed:
 

2.1.7. Header Field: Bcc

   Description:
      Blind-carbon-copy recipient mailbox

   Applicable protocol: Mail
[18]

   Status: standard

   Author/change controller:
      IETF  (mailto:iesg@ietf.org)
      Internet Engineering Task Force

   Specification document(s):

      RFC 2822 [18] (section 3.6.3)

   Related information:

      Contains addresses of recipients of the message whose addresses
      are not to be revealed to other recipients of the message.
      Defined as standard by
RFC 822.
 

Bruce Barnes
ChicagoNetTech Inc

Phone: (224) 444-0169

E-Mail and DNS Security Specialist
Network Security Specialist

Customer Service Portal: https://portal.chicagonettech.com
Website: https://www.ChicagoNetTech.com
Security Blog: http://networkbastion.blogspot.com/

Web and E-Mail Hosting, E-Mail Security and Consulting
1
Bruce Barnes Replied
September 29, 2014 at 8:32 AM
By design, BCC is private and cannot be displayed.
 
If SmarterTools was to include the BCC in the headers of e-mail messages, this will make the SmarterMail MX server non-compliant with the IETF rules and regulations as specified in Section 2.1.7 of RFC 4021   Those rules specifically mandate that BCC information shall not be disclosed.   This is further defined in RFC RFC 822.
 
The IETF is the ultimate authority for all things Internet and e-mail, and sets the standards by which the Internet operates.
 
This is not a good idea.
Bruce Barnes
ChicagoNetTech Inc

Phone: (224) 444-0169

E-Mail and DNS Security Specialist
Network Security Specialist

Customer Service Portal: https://portal.chicagonettech.com
Website: https://www.ChicagoNetTech.com
Security Blog: http://networkbastion.blogspot.com/

Web and E-Mail Hosting, E-Mail Security and Consulting
1
Steve Reid Replied
September 29, 2014 at 8:43 AM
Somehow it must work between Exchange and Outlook because when searching it clearly states the BCC addresses will be listed in the header.
 
I am sure that exchange is IETF compliant so there must be a way for this to happen.
0
Bruce Barnes Replied
September 30, 2014 at 1:36 AM
BCC should never be made public except in server logs. If Wxchange is making BCC public in headers, then anyone can see the BC recipients, and that defeats BCC. BCC should never be made public in headers or anywhere else.
Bruce Barnes
ChicagoNetTech Inc

Phone: (224) 444-0169

E-Mail and DNS Security Specialist
Network Security Specialist

Customer Service Portal: https://portal.chicagonettech.com
Website: https://www.ChicagoNetTech.com
Security Blog: http://networkbastion.blogspot.com/

Web and E-Mail Hosting, E-Mail Security and Consulting
1
Steve Reid Replied
September 30, 2014 at 5:22 AM
I'm not sure about how they do it... All I know is that if I sent an email to a bunch of BCC recipients, then I surely want to see who I sent it to by checking my sent items.
 
Nobody wants anyone else to know who was in the BCC, regardless of regulations that's just common sense and the reason for the Blind Carbon Copy.
1
FlexWS Replied
December 19, 2014 at 10:25 AM
Yes, Exchange/Outlook and office365 do this for Sent Items.
 
The RFC says "Contains addresses of recipients of the message whose addresses are not to be revealed to other recipients of the message."
 
It is only prohibited to show the BCC contents to other recipients.
It is not prohibited to show the BCC contents to the sender of the message, since he is not one of the "other recipients of the message" as the RFC states.
 
What this means for outgoing messages to the recepients: Nothing, keep the current method.
 
What this means to the single message that will be placed in my Sent Items folder: Add the BCC addresses as a BCC-header.
 
Please (re)consider it, so the other day we can still see who we have mailed to.
1
Paul Blank Replied
January 5, 2015 at 9:49 AM
Just checked this in SM webmail.  The BCC addresses are there when you view the header.  So if you need this, you can at least fire up Webmail and have a look.
0
John Marx Replied
January 5, 2015 at 3:58 PM
I understand that BCC is "private" and the debate is seeing it in the sent items in Outlook. Just to add fuel to the fire I just sent a test email from GMail and then went to the Sent Items. I can see the BCC there as well.

Reply to Thread