Hi there Roger,
I think, IMHO, it's better for the user to see yahoo's address then to
have the possibility of seeing a forged email on the from of his MUA. At
least he knows it who really sent the message. What do you think on this?
Best regards,
------------------------------------------------
Rodrigo Afonso
rafonso(_at_)rits(_dot_)org(_dot_)br
Gerente TI
RITS - Rede de Informações para o Terceiro Setor
------------------------------------------------
http://www.rits.org.br
Rua Guilhermina Guinle, 272/6º Andar
Rio de Janeiro/RJ - CEP: 22270-060
Tel: (21) 2527-5494 / Fax: (21) 2527-5460
Roger Moser wrote:
Rodrigo wrote:
But what if, only when the Sender-Envelope email address is different
from the From: header email address, we change the From: header to the
Sender-Envelope, forcing the mail clients to see who really sent the
message, and put the "user inserted" From: Header on other X-whatever
header so at least the common user, that doesn't understand nothing
about SPF and so on, sees that a message that is sent from their Bank
for example, didn't come directly from them, but from another sender?
Wouldn't that be more reasonable? I mean, if I get an email sent on my
behalf by someone that isn't me I wan't the person receiving it at least
seeing who sent it no just putting my email up there at the From on my
MUA.
For all mail from Yahoo groups the envelope sender is different to the From:
address in the header. The user should not see the envelope sender because
it looks like follows:
sentto-6627711-107893-1091201205-user=example(_dot_)com(_at_)returns(_dot_)groups(_dot_)yahoo(_dot_)com
Roger
-------
Sender Policy Framework: http://spf.pobox.com/
Archives at http://archives.listbox.com/spf-discuss/current/
Send us money! http://spf.pobox.com/donations.html
To unsubscribe, change your address, or temporarily deactivate your subscription,
please go to http://v2.listbox.com/member/?listname=spf-discuss(_at_)v2(_dot_)listbox(_dot_)com