MozillaZine

Figuring out whether the recipient read your message

From MozillaZine Knowledge Base

(Difference between revisions)
Revision as of 14:19, 30 April 2007
Armando (Talk | contribs)
(Return Receipts)
<-- Previous diff
Current revision
Tanstaafl (Talk | contribs)
(Email tracking)
Line 3: Line 3:
==Return Receipts== ==Return Receipts==
-One way to tell if a person has read your message is to request an (MDN) return receipt. If you select Options -> Return Receipt when composing a message it will add a header to the message that requests the recipients email client to send a reply. It does this by adding a '''Disposition-Notification-To''': header that specifies who to send the reply to. However, you can't rely upon this because many email clients and webmail let the user decide whether to ignore return receipts, or to decide on a case by case basis whether to allow the return receipt.+One way to tell if a person has read your message is to request a Message Disposition Notifications (MDN) return receipt ([http://www.ietf.org/rfc/rfc2298.txt]). If you select Options -> Return Receipt when composing a message it will add the "Disposition-Notification-To: ..." header to the message that requests the recipients email client to send a reply and specifies who to send the reply to. However, you can't rely upon this because many email clients and webmail let the user decide whether to ignore return receipts, or to decide on a case by case basis whether to allow the return receipt.
-"Tools -> Account Settings -> Return Receipts" lets you specify what Thunderbird should do when it gets a request to send a return receipt, for each account.+You can specify what Thunderbird should do when it gets a request to send a return receipt in "Tools -> Options -> Advanced -> General -> Return receipts". You also have the option of customizing the settings for an account using "Tools -> Account Settings -> Return Receipts" if you don't want it to use the global settings. The [http://nic-nac-project.de/~kaosmos/index-en.html#nrrh New return receipt handler] extension lets you decide when you read the message whether or not to let it send the return receipt, rather than using those settings.
-Another type of receipt is the DSN receipt. The only purpose of DSN receipts is to let a sender know when the recipient's server received the message. You cannot be sure the message message will be read but MDN is less intrusive of the recipient's privacy and nearly all servers support it. Unfortunately Thunderbird doesn't yet support DSN receipts (this is [https://bugzilla.mozilla.org/show_bug.cgi?id=93085 Bug 93085]).+Another type of receipt is the Delivery Status Notification (DSN) receipt ([http://www.ietf.org/rfc/rfc1894.txt]). The only purpose of DSN receipts is to let a sender know when the recipient's server received the message. The sender cannot be sure the message will be read but DSN is less intrusive of the recipient's privacy than MDN and nearly all servers support it. Thunderbird 3 supports DSN receipts. Use "Options -> Delivery Status Notification" when composing a message to request a DSN receipt. The MiliMail project (now called the [http://adullact.net/plugins/mediawiki/wiki/milimail/index.php/Trustedbird_Project TrustedBird] project) adds several features to Thunderbird such as MDN Deletion receipts and DSN Delivery receipts. Some are available as add-ons, others are built into special builds of Thunderbird. Unfortunately their last build is based on 3.1.15. See [https://lwn.net/Articles/375994/ Trustedbird: Additional email security for Thunderbird].
 + 
 +The [https://addons.mozilla.org/en-US/thunderbird/addon/dsn-settings/ DSN Settings] add-on provides settings to control DSN requests. The [https://addons.mozilla.org/en-US/thunderbird/addon/mdn-extended/ MDN Extended] add-on allows the recipient of a message to send a MDN return receipt. Both support Thunderbird 3.*. Try installing the [https://addons.mozilla.org/en-US/thunderbird/addon/checkcompatibility/?src=ss Disable Add-on Compatibility Checks] add-on first, and then ignore the warning message about the add-on being incompatible when you install it.
 + 
 +The [https://addons.mozilla.org/en-US/thunderbird/addon/notification-viewer/ Notification Viewer] add-on identifies and displays the status of pending and received notifications for messages sent with notification requests. You don't need to use it to get a return receipt, but it can be useful if you send a lot of messages where you request a return receipt.
 + 
 +===Exchange 2007===
 +If you use Exchange 2007 and the sender requests a receipt Exchange will send one receipt when you fetch/download the message and another if you click OK to tell Thunderbird to send a receipt. Nothing you can do about the first receipt.
==Email tracking== ==Email tracking==
-A unscrupulous way to tell if somebody read your message is to send a HTML message that retreives web bugs from a remote server. A web bug is a graphics image too tiny for a user to notice it. If the server logs the request then you have proof the recipient read the message. Unlike return receipts, this can be done secretly. Usually you have to use a proxy (and have the service send you the return receipt) or use the service's web page to send the message and check on its status. This is the reason many email clients provide an option to disable loading remote images. +An unscrupulous way to tell if somebody read your message is to send an HTML message that retrieves web bugs from a remote server. A web bug is a graphics image too tiny for a user to notice it. If the server logs the request, then you have proof the recipient read the message. Unlike return receipts, this can be done secretly. Usually you have to use a proxy (and have the service send you the return receipt) or use the service's web page to send the message and check on its status. This is the reason many email clients provide an option to disable loading remote images.
-Some of these email services make more sophisticated use of HTML. For example, [http://www.returnreceipt.com/ ReturnReceipt] uses IFRAMEs, bypassing most email clients attempts to block loading remote images. Currently only a few email clients such as Kmail are able to disable that call, while still displaying the message as HTML. +Some of these email services make more sophisticated use of HTML. For example, ReturnReceipt used IFRAMEs, bypassing most email clients' attempts to block loading remote images. Currently only a few email clients such as Kmail are able to disable that call while still displaying the message as HTML.
 + 
 +[https://getnotify.com Get Notify] , [https://mailtrack.io/en/ Mailtrack], [https://www.bananatag.com Bananatag], and [https://www.saleshandy.com SalesHandy] seem to be the most popular email tracking services nowadays.
Some ways to defeat email tracking: Some ways to defeat email tracking:
Line 19: Line 28:
* Reading the message while not connected to the Internet is the safest and most reliable way. * Reading the message while not connected to the Internet is the safest and most reliable way.
* Viewing the message as plain text using "View-> Message Body as -> Plain Text" is a good solution, as long as you don't click on a link or open an attachment. * Viewing the message as plain text using "View-> Message Body as -> Plain Text" is a good solution, as long as you don't click on a link or open an attachment.
-* Disabling loading of remote images using Tools -> Options -> General is very convenient, but its useless against some of the more sophisticated services.+* Disabling loading of remote images using Tools -> Options -> General is very convenient, but it's useless against some of the more sophisticated services.
* Make a connection through a proxy such as [http://www.proxomitron.info/ Proxomitron] that is configured to run filters to remove web bugs and disable IFRAMEs. * Make a connection through a proxy such as [http://www.proxomitron.info/ Proxomitron] that is configured to run filters to remove web bugs and disable IFRAMEs.
-If you're trying to figure out whether a recipient read your message there doesn't appear to be any way to quarantee it as long as you're using different mail servers. The recipient can disable a request for a return receipt. All of the tools and services for email tracking appear to rely upon the recipient either not being technically knowledgeable enough to protect their privacy, that its too much of a hassle for them to take the necessary precautions, or that they don't care.+If you're trying to figure out whether a recipient read your message, there doesn't appear to be any way to guarantee it as long as you're using different mail servers. The recipient can disable a request for a return receipt. All of the tools and services for email tracking appear to rely upon the recipient not being technically knowledgeable enough to protect their privacy, that it's too much of a hassle for them to take the necessary precautions, or that they don't care.
==See also== ==See also==
Line 28: Line 37:
==External links== ==External links==
- +* Bug report about [https://bugzilla.mozilla.org/show_bug.cgi?id=577489 recurring return receipt acknowledgement] in 3.1
-* [http://email.about.com/od/windowsreturnreceipts/ Some well known email tracking services/tools]+* [https://freedom-to-tinker.com/2017/09/28/i-never-signed-up-for-this-privacy-implications-of-email-tracking/ I never signed up for this! Privacy implications of email tracking]
 +* [http://www.msexchange.org/kbase/ExchangeServerTips/ExchangeServer2007/ManagementAdministration/DuplicateReadReceiptsAreSentWhenUsingPOP3orIMAP4inExchange2007.html Duplicate read receipts are sent when using POP3 or IMAP4 in Exchange 2007] . Also see [https://bugzilla.mozilla.org/show_bug.cgi?id=561970#c4]
* [http://www.securityfocus.com/columnists/258 Email privacy is lost article at Security Focus] * [http://www.securityfocus.com/columnists/258 Email privacy is lost article at Security Focus]
-* [http://www.jd5000.net/proxo/new.php Proxomitron resources] 
* [http://www.faqs.org/rfcs/rfc3798.html Message Disposition Notification RFC] * [http://www.faqs.org/rfcs/rfc3798.html Message Disposition Notification RFC]
 +* [https://nic-nac-project.org/~kaosmos/index-en.html#dsngui DSN Options GUI add-on]
 +* The [http://milimail.org/milimail/index.php/Main_Page MiliMail] project has developed several notification extensions and a client that is an enhanced version of Thunderbird.
* [http://www.msgtag.com/home/ MsgTag] * [http://www.msgtag.com/home/ MsgTag]
 +* [http://www.jd5000.net/proxo/new.php Proxomitron resources]
 +* [http://email.about.com/od/windowsreturnreceipts/ Some well known email tracking services/tools]
 +* [http://www.labnol.org/internet/read-receipts-with-googl/18700/ Use a URL shortening service to track if a message is read]
 +* [http://news.cnet.com/8301-19882_3-20036542-250.html?tag=blogs;Rafe%27s%20Radar "x-expires" header proposal]
[[Category:Composing messages (Thunderbird)]] [[Category:Composing messages (Thunderbird)]]
[[Category:Issues (Thunderbird)]] [[Category:Issues (Thunderbird)]]

Current revision

This article was written for Thunderbird but also applies to Mozilla Suite / SeaMonkey (though some menu sequences may differ).

Contents

Return Receipts

One way to tell if a person has read your message is to request a Message Disposition Notifications (MDN) return receipt ([1]). If you select Options -> Return Receipt when composing a message it will add the "Disposition-Notification-To: ..." header to the message that requests the recipients email client to send a reply and specifies who to send the reply to. However, you can't rely upon this because many email clients and webmail let the user decide whether to ignore return receipts, or to decide on a case by case basis whether to allow the return receipt.

You can specify what Thunderbird should do when it gets a request to send a return receipt in "Tools -> Options -> Advanced -> General -> Return receipts". You also have the option of customizing the settings for an account using "Tools -> Account Settings -> Return Receipts" if you don't want it to use the global settings. The New return receipt handler extension lets you decide when you read the message whether or not to let it send the return receipt, rather than using those settings.

Another type of receipt is the Delivery Status Notification (DSN) receipt ([2]). The only purpose of DSN receipts is to let a sender know when the recipient's server received the message. The sender cannot be sure the message will be read but DSN is less intrusive of the recipient's privacy than MDN and nearly all servers support it. Thunderbird 3 supports DSN receipts. Use "Options -> Delivery Status Notification" when composing a message to request a DSN receipt. The MiliMail project (now called the TrustedBird project) adds several features to Thunderbird such as MDN Deletion receipts and DSN Delivery receipts. Some are available as add-ons, others are built into special builds of Thunderbird. Unfortunately their last build is based on 3.1.15. See Trustedbird: Additional email security for Thunderbird.

The DSN Settings add-on provides settings to control DSN requests. The MDN Extended add-on allows the recipient of a message to send a MDN return receipt. Both support Thunderbird 3.*. Try installing the Disable Add-on Compatibility Checks add-on first, and then ignore the warning message about the add-on being incompatible when you install it.

The Notification Viewer add-on identifies and displays the status of pending and received notifications for messages sent with notification requests. You don't need to use it to get a return receipt, but it can be useful if you send a lot of messages where you request a return receipt.

Exchange 2007

If you use Exchange 2007 and the sender requests a receipt Exchange will send one receipt when you fetch/download the message and another if you click OK to tell Thunderbird to send a receipt. Nothing you can do about the first receipt.

Email tracking

An unscrupulous way to tell if somebody read your message is to send an HTML message that retrieves web bugs from a remote server. A web bug is a graphics image too tiny for a user to notice it. If the server logs the request, then you have proof the recipient read the message. Unlike return receipts, this can be done secretly. Usually you have to use a proxy (and have the service send you the return receipt) or use the service's web page to send the message and check on its status. This is the reason many email clients provide an option to disable loading remote images.

Some of these email services make more sophisticated use of HTML. For example, ReturnReceipt used IFRAMEs, bypassing most email clients' attempts to block loading remote images. Currently only a few email clients such as Kmail are able to disable that call while still displaying the message as HTML.

Get Notify , Mailtrack, Bananatag, and SalesHandy seem to be the most popular email tracking services nowadays.

Some ways to defeat email tracking:

  • Reading the message while not connected to the Internet is the safest and most reliable way.
  • Viewing the message as plain text using "View-> Message Body as -> Plain Text" is a good solution, as long as you don't click on a link or open an attachment.
  • Disabling loading of remote images using Tools -> Options -> General is very convenient, but it's useless against some of the more sophisticated services.
  • Make a connection through a proxy such as Proxomitron that is configured to run filters to remove web bugs and disable IFRAMEs.

If you're trying to figure out whether a recipient read your message, there doesn't appear to be any way to guarantee it as long as you're using different mail servers. The recipient can disable a request for a return receipt. All of the tools and services for email tracking appear to rely upon the recipient not being technically knowledgeable enough to protect their privacy, that it's too much of a hassle for them to take the necessary precautions, or that they don't care.

See also

External links