News for hackers. Stuff that matters.

A comment on Google's CardDAV server isn't standards compliant (2014). Parent comment

Re:Google's CardDAV server isn't standards compliant (2014) by leephillips on Monday February 19, 2018 @10:21AM (#16413374)
Sounds like I need to update my article. Thanks for this information.

But note that they are still violating the RFPs, if they rewrite headers for people who fail to jump through these hoops. They can implement their spam protections (if that's the purpose) while remaining compliant by rejecting the emails in question.

[ Parent | on HN ]
Re:Google's CardDAV server isn't standards compliant (2014) by Aelius on Monday February 19, 2018 @12:11PM (#16414092)
Maybe I've misunderstood something, but if gmail didn't do this, what's to stop me from sending emails that look like they come from your address?
[ Parent | on HN ]
Re:Google's CardDAV server isn't standards compliant (2014) by leephillips on Monday February 19, 2018 @12:17PM (#16414131)
Nothing. The standard allows you to put anything you want in the From: header. Sometimes I send emails from Santa Claus or God. The envelope information is still there.
[ Parent | on HN ]
Re:Google's CardDAV server isn't standards compliant (2014) by leephillips on Monday February 19, 2018 @12:19PM (#16414147)
Actually, not "nothing." If the MSA doesn't like this, it is free to reject the email. But not to change its content.
[ Parent | on HN ]