On Mon, 7 Jun 2004, Meng Weng Wong wrote:
On Mon, Jun 07, 2004 at 02:26:56PM +1000, Chris Drake wrote:
| MS MUA's hide the sender email address by default, so anyone is free
| to do this:-
|
| MAIL FROM: spammer(_at_)spf+cid-compliant-evilhost(_dot_)com
| DATA
| From: "updates(_at_)microsoft(_dot_)com"
<spammer(_at_)spf+cid-compliant-evilhost(_dot_)com>
|
| etc...
|
| so CID, as it currently stands, is (IMHO) pointless - or am I missing
| something?
Don't MS MUAs say
From <sender-address> on behalf of <from-address>
I thought that was only if
a) Sender is present
b) From is present
c) Sender != From
S.
--
Shevek http://www.anarres.org/
I am the Borg. http://www.gothnicity.org/