https://bugzilla.novell.com/show_bug.cgi?id=738994 https://bugzilla.novell.com/show_bug.cgi?id=738994#c0 Summary: Gravatar shows cleartext e-Mail address to spam harvesters Classification: Internal Novell Products Product: openSUSE Build Service Version: master Platform: All OS/Version: All Status: NEW Severity: Normal Priority: P5 - None Component: webui AssignedTo: adrian@suse.com ReportedBy: matthias@mailaender.name QAContact: adrian@suse.com Found By: --- Blocker: --- User-Agent: Mozilla/5.0 (X11; Linux i686; rv:9.0.1) Gecko/20100101 Firefox/9.0.1 Please make this Gravatar more privacy aware or optional. It shows my e-Mail address to everyone even when not logged in. Reproducible: Always Steps to Reproduce: 1) Go to the HTML source code of https://build.opensuse.org/request/show/74344 (or any other) 2) Search for <img alt="Gravatar for ___@___.subdomain" Actual Results: Search machines like Google show a preview of the page: 13088235835 months ago, new, Gravatar for ___@___.subdomain forename lastname (username), description ... I guess this is how spam bots see it as well. Expected Results: <img alt="placeholder for people who don't to use this Gravatar service" I hate spam. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.