https://bugzilla.novell.com/show_bug.cgi?id=738994

https://bugzilla.novell.com/show_bug.cgi?id=738994#c0

Summary: Gravatar shows cleartext e-Mail address to spam harvesters Classification: Internal Novell Products Product: openSUSE Build Service Version: master Platform: All OS/Version: All Status: NEW Severity: Normal Priority: P5 - None Component: webui AssignedTo: adrian@suse.com ReportedBy: matthias@mailaender.name QAContact: adrian@suse.com Found By: --- Blocker: ---

User-Agent: Mozilla/5.0 (X11; Linux i686; rv:9.0.1) Gecko/20100101 Firefox/9.0.1

Please make this Gravatar more privacy aware or optional. It shows my e-Mail address to everyone even when not logged in.

Reproducible: Always

Steps to Reproduce: 1) Go to the HTML source code of https://build.opensuse.org/request/show/74344 (or any other) 2) Search for <img alt="Gravatar for ___@___.subdomain" Actual Results: Search machines like Google show a preview of the page: 13088235835 months ago, new, Gravatar for ___@___.subdomain forename lastname (username), description ... I guess this is how spam bots see it as well.

Expected Results: <img alt="placeholder for people who don't to use this Gravatar service"

I hate spam.