3 ms·
Email passwords are not for preventing impersonation. For one, POP3 passwords are separate from SMTP. Second, nothing in SMTP prevents impersonation… large mail
by elondaits 3y ago
Email passwords are not for preventing impersonation. For one, POP3 passwords are separate from SMTP. Second, nothing in SMTP prevents impersonation… large mail handlers like GMail don’t allow it anymore, but you can put whatever you want in the “From” field. Things like SPF, DMARC and DKIM are there to prevent impersonation at the domain level for mail servers that want to protect their users.
- hammyhavoc 3y agoWhen accessing email via a protocol with an email client, sure, but I primarily had the Gmail web app in mind when I wrote the comment. I also touched on protocols in another comment. With what I had in mind, if you logged into my Gmail account, which provides both sending and receiving, you could impersonate me to my own mother, but I would have nothing to hide as I don't receive any sensitive information via email (privacy). However, accounts elsewhere could be recovered via my email, and thus be used to impersonate me elsewhere (security).