On 7/6/23 9:42 AM, Bill Gunshannon wrote:
Doesn't the list check addresses to see if the poster is a member?
This has never been a good test. It really only works to reject blatant unwanted messages.
It's trivial to lie and say that a message is from someone that it is not from. Both SMTP envelope and message headers.
It's somewhat more difficult to successfully spoof some domains than others, depending on the spoofed domain's security posture; e.g. SPF, DKIM, DMARC.
Grant. . . .
