# Email security/obscurity for moderators is inconsistent

**URL:** <https://meta.discourse.org/t/email-security-obscurity-for-moderators-is-inconsistent/33837>\
**Category:** Bug\
**Created:** [28 Septiembre, 2015 14:29 UTC](https://meta.discourse.org/t/email-security-obscurity-for-moderators-is-inconsistent/33837 "2015-09-28T14:29:36Z")\
**Posts on this page:** 1\
**Showing post:** 1

<div class="post-metadata">

**Author:** ![calmh](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/calmh/32/115466_2.png) [@calmh](https://meta.discourse.org/u/calmh)\
**Post date:** [28 Septiembre, 2015 14:29 UTC](https://meta.discourse.org/t/email-security-obscurity-for-moderators-is-inconsistent/33837/1 "2015-09-28T14:29:36Z")

</div>

The user list hides emails (except for self, obscured), has a button to show them, and pressing that logs a “viewed email” event for each user on the page (I think - I didn’t actually try this on my instance).

 ![](https://global.discourse-cdn.com/meta/original/3X/3/1/31f933a0ee57dc0723db6db305dc369f6ddfcb1c.png)

However the Emails/All tab shows them all straight up in clear text (obscured in the screenshot), even for emails that _weren’t_ sent.

 ![](https://global.discourse-cdn.com/meta/original/3X/5/2/522421e37ab081cd31cd4cd53f196518a01dd942.png)

It seems these two pages ought to use similar enforcement mechanisms or the security is for nought?

---

_[View the full topic](https://meta.discourse.org/t/email-security-obscurity-for-moderators-is-inconsistent/33837)._