News for hackers. Stuff that matters.
Re:FastMail loses customers, faces calls to move over anti-e... by ascar on Monday February 25, 2019 @03:12AM (#19243934)
That sounds pretty much like spoofing to me and not as actually sending from that address. Or does Gmail also give you the option to add the necessary DKIM and SPF records to your domain?
Re:FastMail loses customers, faces calls to move over anti-e... by tinus_hn on Monday February 25, 2019 @04:22AM (#19244221)
‘Actually sending from an address’ is a concept that doesn’t exist.

If you want, you can limit the hosts that are allowed to send mail coming from your domain using SPF. Google does not control your domain so they can’t force, forbid or give your the option to do anything, but they do have a supported way for you to add their servers to the list.

This is all legacy though, if you set up a new alternative address you have to allow Gmail to send the messages through your own SMTP server.

Re:FastMail loses customers, faces calls to move over anti-e... by ascar on Monday February 25, 2019 @05:11AM (#19244491)
I was just paraphrasing the concept of authentication for email domains. That's what DMARC is doing and why I mentioned DKIM and SPF.

I was unaware gmail free has a supported way to add the correct SPF records. Though thinking about it, even unsupported might be as simple as regularly scraping them from gmail and hosting them on your domains DNS records.

But they probably don't support DKIM through that (now legacy?) hack, which granted, isn't that important if emails come from a gmail mail server.