News for hackers. Stuff that matters.
Re:Gmail spam-filters PayPal security messages by kelnos on Wednesday February 06, 2019 @06:57PM (#19101512)
Not suspicious for a mailing list, sure. But definitely suspicious for a security-related email from what is essentially a bank.
Re:Gmail spam-filters PayPal security messages by megous on Wednesday February 06, 2019 @07:15PM (#19101667)
Why? They simply want bounces delivered to a differnt address than the real replies from customers. Seems reasonable if it's a from address used for a mass/automated mailing. (it is)
Re:Gmail spam-filters PayPal security messages by jakejarvis on Thursday February 07, 2019 @01:38AM (#19103473)
This was solved decades ago[0] with the Reply-To header. Send emails from [email protected] and set the Reply-To to [email protected].

Emails then bounce to no-reply@ and any legitimate email client will auto-populate support@ as the To address when the user clicks reply.

[0] https://www.ietf.org/rfc/rfc2076.txt

Re:Gmail spam-filters PayPal security messages by megous on Thursday February 07, 2019 @07:26AM (#19104768)
Sure there are alternatives, but it's still not suspicious. I just went through my "shopping" folder and more than a few comapnies have different From header domain and envelope From domain, including some big american ones like Airbnb who presumably know what they're doing.

Also PayPal was a contributor to DMARC RFC, so they presumably know what they're doing too around e-mail, wouldn't you say?

I get confirmations of flight reservations where env-From is mandrill app and From is kiwi.com. DMARC passes. Some of my banks do this, too. Registrar of my domains does this. Many others too.

It's just not suspicious and these are very important senders to me (I mean I'd hate to fail to renew my domain, or miss that one-in-a-lifetime e-mail that someone is withdrawing money from my bank account other than me, because of a braindead SPAM policy) and google should not care.