On 2017-12-04 18:08, William L. Thomson Jr. wrote: > On Mon, 4 Dec 2017 18:01:39 -0500 > "William L. Thomson Jr." <wlt...@o-sinc.com> wrote: > > > On Mon, 4 Dec 2017 14:43:15 -0800 > > Matt Turner <matts...@gentoo.org> wrote: > > > > > > Sorry. I think I was confusing a number of irritating things you've > > > done: email spoofing, > > > > That was a complete accident due to a new version of Kmail that had > > the from field editable by default. It was NOT intentional. Not the > > 1st time. The 2nd time was for confirmation. I was in disbelieve such > > abuse was even possible with @gentoo.org addresses. That was a > > shocking discovery given I have administrated mail severs for quite > > some time. In part why I use ASSP. > > I filed a bug with KDE on that but of course went WONTFIX. I think its > horrible as it allows people to spoof, spam and do bad things... > > Make From field in the composer read only > https://bugs.kde.org/show_bug.cgi?id=373313 > > Me personally I would never make software or change it to allow people > to make such a mistake. Others felt differently. I stopped using > Kmail2. I use Claws-mail now, but it also has editable from field.... :( > > Email clients should only allow email address that are in configured > accounts. But that is my opinion. Others seem to feel differently. I > cannot see any good reasons for such really.
One reason is to send from a nonexistent account to avoid getting replies in the first place. Like donotre...@example.com for order updates, confirmation emails, and so on. A person doesn’t actually exist behind the email, but emails have to say they’re coming from somewhere. And, a properly setup SMTP server will need an credentials to send those email. If donotreply doesn’t exist, then the account setup will (probably) have an email address that differs from the one that’s used to compose the email. I use it myself when I need to inform our customers about a change. I don’t want to field hundreds of email personally, so I change the from address. So, email clients most definitely should allow an individual to change the from field. It’s a good thing. But, like any other tool, it can be used improperly.
signature.asc
Description: Digital signature
