some emails leak the email addresses of LP admins

[Junien F]

Hi,

The "mirror verification failed" emails are sent with LP admins and the mirror owner in the "To" field of the email, leaking the email addresses of all LP admins.

Could this please be changed to "Bcc" for the LP admins ? (or something more elaborate, I don't know).

Thanks !

[Junien F (axino)]

Note that this also happens for translation errors emails, for a recent example :

Subject: Import problem - German (de) - bash in Ubuntu Jammy package "bash"

[Colin Watson (cjwatson)]

In the mirror verification case, as far as I can see, the mirror owner is notified in a separate email, so they wouldn't see the email addresses of LP admins. But I agree it seems best to avoid this anyway.

I think the simplest thing would be to send the notification as a separate email to each recipient in these cases. A useful thing to grep for would be `get_contact_email_addresses`; using the result of that directly as the To: line of a single email is fine when it's called with an ordinary user or maybe a team, but probably not if it's being called with some kind of distinguished admin team.