hide cc: email-address better from other users

[flyhigh <lowflight66@…>]

The email-addresses shown under cc: are way to long/much info that it is easy to get the whole address using a web-search-engine. Since this information is not quite usefule for normal user please hide it or at least shorten the address better, that you do not get the full address that easily.

Thanks

[Remy Blank]

E-mail addresses are already obfuscated, unless you have EMAIL_VIEW permission. You won't see any e-mail addresses in the CC list on this site, for example (e.g. #1106).

[flyhigh <lowflight66@…>]

screenshot

[flyhigh <lowflight66@…>]

screenshot

[flyhigh <lowflight66@…>]

I do !

and even they shortened, it is often not that hard to get the full address, if you have at least the full username and only need the mail-server to get the full email-address.

It is also not that hard to fish all the usernames and extend it with the most common mail-provider.

→ spam

by the way, my username and my email-address are shown. - I hope this is only offered to me and everyone else only sees my username.

[Remy Blank]

Let me clarify:

• You're not seeing complete e-mail addresses, you see obfuscated e-mail addresses. The screenshots confirm the feature is working as advertised.
• No, guessing the domain name is not easy in the general case. Sure, you can try to add gmail.com and see if it works, and you probably will get a few hits. Still, there are millions of domains out there, so this won't work sufficiently well.
• Again, you're not seeing your own complete e-mail address (except in the edit fields), but an obfuscated version. The address in the edit field is only shown to you.

So the current feature is working as designed. I don't think it's worth adding a possibility to hide e-mail addresses completely. What do others think?

[flyhigh <lowflight66@…>]

My opinion:
I think this is no useful information for normal user, maybe the total number, but that's it.

and the trac-user-name is sufficient, you do not need a email-address.

[Christian Boos]

Replying to flyhigh <lowflight66@…>:

My opinion:
I think this is no useful information for normal user, maybe the total number, but that's it.

Well, RoundUp shows the nosy list as a list of users, JIRA shows the count of watchers, Bugzilla shows the full list of e-mails unobfuscated, so there's really no general "rule" here.

and the trac-user-name is sufficient, you do not need a email-address.

This is a more general matter, deciding what kind of user information to show (see also #7339 and #3737). Like rblank said, it's not worth special casing the CC: field.

When you do have EMAIL_VIEW, seeing the full list of address in the CC list is useful, at least as long as we don't have #2456 and a user profile page.

So I'm not against the feature, but it should rather be done with the whole system in mind rather than a specific hack for the CC: list, and I think this is what the #7339 ticket is about.

Closing as duplicate.