A fake Hide My Email header can expose the address behind your Apple Account

A forged Hide My Email header can make Mac Mail expose a user's Apple Account address, extending the privacy risk beyond people who use Apple's alias service.Apple MailDeveloper Jeff Johnson disclosed the Mac Mail privacy flaw on July 19. His testing showed that a specially crafted message could make Mail display a misleading sender identity while a reply went out…

Summary from the AppleInsider feed. The full story lives on their site.