2 ms·
It's just like the from field in the email header. It's not there to verify the sender, it's there to tell the recipient where to send the reply to. Sometimes
by bena 8y ago
It's just like the from field in the email header. It's not there to verify the sender, it's there to tell the recipient where to send the reply to.
Sometimes you want someone else to call on your behalf. But if they need to call back, you want them to reach you.
- ghayes 8y agoEmail has a `reply-to` header specifically for this purpose. The from field, I believe, was meant to be the actual from, which can now be verified via DKIM keys. A common case might be: `from: tom@co, reply-to: support@co` so that the response goes to the full support team but it is still clear who the sender is.
- howard941 8y agoRe From, there's From: and there's also From_ (From space) that's created by the terminal mail server from the (E)SMTP handshake. All but the most recent (topmost) Received: header(s), supplied by the terminal mail server, are easily spoofed...
- mehrdadn 8y agoYou probably already know this but for anyone else reading: "from" isn't quite the same as "sender" (there's also a Sender field and it's optional). I think Sender is supposed to represent something like your secretary sending an email on your behalf? Or another situation where the entity sending is not the same one nominally writing the message.