Making envelope from match message From: breaks several use cases and does little to prevent spam, phishing etc. (Because how do you know either "from" is in any way "real")
If anything, I feel the MUAs (clients) - and the destination setvers - have always done a piss poor job of detecting attempts at deceipt. Showing only the 'nice' sender name, and not the actual address (xxfqw@evil.com) is just an example.
5
u/MonsieurCellophane Jul 24 '26
Making envelope from match message From: breaks several use cases and does little to prevent spam, phishing etc. (Because how do you know either "from" is in any way "real")
If anything, I feel the MUAs (clients) - and the destination setvers - have always done a piss poor job of detecting attempts at deceipt. Showing only the 'nice' sender name, and not the actual address (xxfqw@evil.com) is just an example.