Tracking, Propagation Attacks, and What We Found in Real Email Traffic

A few weeks ago I posted about finding the same per-recipient identifier in three independent places...