Information about Blind Carbon Copy

For other uses see BCC.

In the context of e-mail, blind carbon copy, abbreviated BCC, refers to the practice of sending a message to multiple recipients in such a way that what they receive does not contain the complete list of recipients.

It was also used, though rarely and with more difficulty in preparation, in typewritten correspondence by ensuring BCC and the names did not appear on the top copy (the original); the most discreet (though troublesome) method was to roll the copies through the typewriter again without the top copy, and type the BCC information onto the otherwise-completed copies. An alternate way is to switch the ribbon setting to strike the paper without raising the ribbon over the area being struck; this, however, leaves impressions in the surface of the paper.

To specify the recipients, an e-mail message can contain addresses in any of the 3 following fields:

• To: field recipients are the audience of the message
• CC: field recipients are others whom the author wishes to publicly inform of the message (carbon copy)
• BCC: field recipients are those being discreetly or surreptitiously informed of the communication and can not see any of the other addressees.

It is common practice to use the BCC: field when addressing a very long list of recipients, or a list of recipients that should not (necessarily) know each other, e.g. in mailing lists.

Benefits

There are a number of reasons for using this feature:

• To send a copy of your correspondence to a third party (for example, a colleague) when you do not want to let the recipient know that you are doing this (or when you do not want the recipient to know the third party's e-mail address).
• To send a message to multiple parties with none of them knowing the other recipients. This can be accomplished by addressing a message to oneself and filling in the actual intended recipients in the BCC field.
• When sending an e-mail to multiple recipients, you can hide their e-mail addresses from each other. This is a sensible anti-spam precaution because it avoids making a long list of e-mail addresses available to all the recipients (which is what happens if you put everyone's address in the To: or CC: fields). For this reason, it often makes sense to use the BCC: field for mailing lists. Some viruses also harvest e-mail addresses from users' cache folder or addressbook, and large CC lists may further the propagation of unwanted viruses, giving another reason to use BCC.

'BCC' is also occasionally used to make certain types of spam e-mail look more convincing—by hiding your e-mail, the spammer hopes to trick you into believing you've accidentally received a legitimate e-mail message that was not intended for you.

Any recipients can see all e-mail addresses specified in the To: and CC: fields. No recipients can see any e-mail address (other than their own) in the BCC: field.

In RFC 2822, it is unclear whether BCC: is designed to ensure the BCC: addresses are hidden from each other. On the one hand, it says:

''The "BCC:" field (where the "BCC" means "Blind Carbon Copy" or "Blind Courtesy Copy") contains addresses of recipients of the message whose addresses are not to be revealed to other recipients of the message.

It also states:

There are three ways in which the "BCC:" field is used.

#In the first case, when a message containing a "BCC:" field is prepared to be sent, the "BCC:" line is removed even though all of the recipients (including those specified in the "BCC:" field) are sent a copy of the message.

#In the second case, recipients specified in the "To:" and "CC:" lines each are sent a copy of the message with the "BCC:" line removed as above, but the recipients on the "BCC:" line get a separate copy of the message containing a "BCC:" line. (When there are multiple recipient addresses in the "BCC:" field, some implementations actually send a separate copy of the message to each recipient with a "BCC:" containing only the address of that particular recipient.)

#Finally, since a "BCC:" field may contain no addresses, a "BCC:" field can be sent without any addresses indicating to the recipients that blind copies were sent to someone.

Which method to use with "BCC:" fields is implementation dependent and may depend on both your mail user agent (e.g. Outlook, Thunderbird) and your mail transfer agent (usually provided by your ISP).

On the other hand, it also states (in the Security Considerations section):

If the "BCC:" field sent contains all of the blind addressees, all of the "BCC:" recipients will be seen by each "BCC:" recipient.

It is not clear whether this is a situation that is simply mentioned as an example of what must never occur.

However, it is argued that the RFC is clear and that the other recipients in this case are those in the CC: and To: fields.

See also

• Carbon copy (CC)

External links

• US-CERT Cyber Security Tip ST04-008, "Benefits of BCC"
• Enabling BCC in Microsoft Outlook
• Creating a BCC in Outlook automatically