4 ms·
Yes, but that's a fault of the mailserver on that domain. It shouldn't allow spoofed email to be sent from its own domain.
by jey 16y ago
Yes, but that's a fault of the mailserver on that domain. It shouldn't allow spoofed email to be sent from its own domain.
- benatkin 16y agoSounds like a good partial solution to me. If SPF traces it back to a mail server that doesn't allow spoofed email, it could skip the confirmation step. GMail lets people change the from field, but only to an email address they can show they have access to, by clicking a confirmation link.