CC& BCC bug: it's a privacy issue

Hi,

Unitl recently, your workaround to put the CC & BCC in the TO was only a minor annoyance on the send mail feature (I never quite understood the use case of BCC someone 20 time if you send an email to 20 people anyway).

However, we just noticed that it's the case as well for event registrations now (upgraded to 3.3.5 last week). This mean that civi leaks the emails of the organisers to the participants, definitely not the email contact we want them to know, logistics are complicated enough without having participant bypassing the official email and contacting directly the organisers.

I think your "fix" to put the BCC & CC causes more problems than it solves. Can you at least create a setting so you can switch the normal behaviour of having CC & BCC where they are supposed to but can enable so they are put in the TO fields for those that did experience problem with the normal configuration ?

X+