News for hackers. Stuff that matters.

A comment on Google's CardDAV server isn't standards compliant (2014). Parent comment

Re:Google's CardDAV server isn't standards compliant (2014) by Aelius on Monday February 19, 2018 @12:11PM (#16414092)
Maybe I've misunderstood something, but if gmail didn't do this, what's to stop me from sending emails that look like they come from your address?
[ Parent | on HN ]
Re:Google's CardDAV server isn't standards compliant (2014) by leephillips on Monday February 19, 2018 @12:17PM (#16414131)
Nothing. The standard allows you to put anything you want in the From: header. Sometimes I send emails from Santa Claus or God. The envelope information is still there.
[ Parent | on HN ]
Re:Google's CardDAV server isn't standards compliant (2014) by leephillips on Monday February 19, 2018 @12:19PM (#16414147)
Actually, not "nothing." If the MSA doesn't like this, it is free to reject the email. But not to change its content.
[ Parent | on HN ]