Hacker News Reader

Comment by tedunangst | Hacker News Reader

Random note: if you use a regular client (such as desktop, but also including the client on your phone), you are almost certainly leaking your IP. gmail, for instance, won't include your IP when using the webmail interface, but every message sent via SMTP will.

View on HN

Just tested on iOS 7 default Mail app, definitely leaks. Is there any way to stop this?

I'm guessing Gmail app would. edit: tested, doesn't leak!

I am also using the iOS Mail app. I tested using an outlook.com account -- no leak.

Then I tested using an account on a personal email server that I set up recently using iRedmail on a VPS -- it leaked! It showed both my external ISP IP addres and my internal IP address on wifi!

Actually it seems the Gmail interface does the same (at-least Google Apps).

    Header: X-Originating-IP: [my-ip-address]

I'm not seeing this ATM, using the non-Google Apps Gmail interface from the U.S. (and sending, as it happens, to a "foreign" address).

Can anyone provide additional input into whether and when the Gmail web interface may be (and when not) inserting this header? Perhaps it's just in the Google Apps context?

Regular gmail.com accounts do not send this header, but I've recently found out that all Google Apps accounts do, and have for a while.

I assume there's some kind of a rationale for them doing this...but I don't quite know what it is.

oh, good to know. i thought at one point they were one of the few webmails to not do that, but i didn't check recently. oops.

Well using a Google Apps account using the web interface it included it. So maybe only gmail?

I just tested one from my Google Apps account's web interface and emailipleak.com claims that it didn't include my IP (same sending on that account through Outlook 2013 too). I wonder if there's a setting to control that?

Reply on news.ycombinator.com