3 ms·

Re: others forging your domain by using Gmail - this is only true in narrow edge cases like this one (which appears to have been relatively quickly fixed by Gma

Re: others forging your domain by using Gmail - this is only true in narrow edge cases like this one (which appears to have been relatively quickly fixed by Gmail). In practice, the Gmail and G suite UIs provide enforcement mechanisms to ensure you own a domain/address before allowing you to send from it. Does it potentially open you up to spoofing if another loophole/exploit like this is discovered? Sure. But as risk factors go, depending on who you are, that's probably relatively low on the list.

herbst 9y ago
Adding to this. You can only use Gmail for sending with your own domains when you have 2FA enabled.
- innocenat 9y ago
  Not really. It also works if you also lower your account security setting to low to enable 'Less-secured app' to login.
  - herbst 9y ago
    Sure that is still available? Pretty sure this is disabled for a few years now. At least it was when I checked last time.