Re:[email protected]
by tonyztan on Sunday September 27, 2020 @04:06PM
(#24609750)
You could check whether the email passed SPF, DKIM, and DMARC checks. Google has certainly implemented these for their SMTP servers. If all of the tests pass, you can be pretty certain that the sender is the owner of the address.
Re:[email protected]
by CydeWeys on Sunday September 27, 2020 @05:26PM
(#24610257)
This is what I was getting at. It's definitely not possible to fully impersonate an email from an @google.com address. We've got all the security bells and whistles turned on.
Though, admittedly, it would be easier for a layman to verify ability to reply to an email than to verify all those features, so point taken.
Not disputing your account in any way, but please don't propagate the widespread myth that only people who own an email address can send from that email address. If you wanted to use your well-known email address as authentication, you'd need to offer to reply to a mail sent to that address.