News for hackers. Stuff that matters.

A comment on JMAP: Like IMAP but Not Really. Parent comment

Re:JMAP: Like IMAP but Not Really by athenot on Friday January 25, 2019 @03:10PM (#19002025)
The From header has always been spoofable. It's just most ISPs (and Google) chose to disallow it to address low-hanging fruit in the fight against spam.

But anyone can set up their own postfix/qmail/sendmail server and put anything they want as the From.

Or am I misunderstanding the issue here?

[ Parent | on HN ]
Re:JMAP: Like IMAP but Not Really by m4lvin on Friday January 25, 2019 @03:19PM (#19002098)
The difference is that using another fastmail account to spoof [email protected] will make the email look much more legitimate (DKIM and SPF wise) to other servers than when it comes from your random.emailserver.domain.foo.
[ Parent | on HN ]