]> Sergey Matveev's repositories - public-inbox.git/commit
hval: only allow domain obfuscation in address
authorEric Wong <e@80x24.org>
Tue, 16 Jan 2018 05:08:22 +0000 (05:08 +0000)
committerEric Wong <e@80x24.org>
Tue, 16 Jan 2018 05:11:09 +0000 (05:11 +0000)
commit24a309bd1221a24ac673ece463f765f7a92921ff
tree22b7f973f5c119cb758c94b7baeffac70b827885
parent956ede734d7c2e8d0a3003c6e2d554114586643e
hval: only allow domain obfuscation in address

Obfuscating username portions of the email address leads
to having subsequent parts of the address not being obfuscated;
which could mean we show someone else's email entirely.

In other words, obfuscating "john.doe@example.com" becomes
might mean "doe@example.com" is picked up by scanners.

In other news, email address obfuscation is still a horrible
usability issue and only exists to appease misguided people.
lib/PublicInbox/Hval.pm
t/hval.t