Re:[email protected]
by tonyztan on Sunday September 27, 2020 @04:06PM
(#24609750)
You could check whether the email passed SPF, DKIM, and DMARC checks. Google has certainly implemented these for their SMTP servers. If all of the tests pass, you can be pretty certain that the sender is the owner of the address.
[ Parent
| on HN ]
Re:[email protected]
by CydeWeys on Sunday September 27, 2020 @05:26PM
(#24610257)
This is what I was getting at. It's definitely not possible to fully impersonate an email from an @google.com address. We've got all the security bells and whistles turned on.
Though, admittedly, it would be easier for a layman to verify ability to reply to an email than to verify all those features, so point taken.