never mind saves a pile of bandwidth from never having to see the
unathenticated message at all, and satisfies RFC 2821 7.1,
specifically:
The paper in question was wrong.
It completely ignores the fact that criminals are stealing over
a million dollars a week by exploiting said loophole.
The unstated 'other uses' can be dispensed with. From now on a
message that says it comes from paypal had better come from paypal
and absolutely nobody else.
If the email specs were completely satisfactory we would not be in
this mess in the first place. They are broken, the fact they were
broken was studiously ignored, that is why there is spam and
now phishing-spam.
Phill