[
https://issues.apache.org/jira/browse/JAMES-3032?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17028878#comment-17028878
]
Benoit Tellier commented on JAMES-3032:
---------------------------------------
Hi remy.
I think we should target a short term solution first being **one level alias
mapping**.
Domain aliases should be supported. However there is currently no distinctions
between hacky domain rewritting setted up from a sys-admin standpoint and a
"functional" Domain Alias. I would be in favour of adding a new RRT type:
DomainAlias.
Once this distinction made, we can disable sending mails from a 'technical'
domain, while ensuring domain alias are supported.
In my opinion, we then need to support both UserAlias and Domain alias as well
as their combinaisons.
I'm not sure recessivity is needed as we enforce target user/domain to exist,
and the source one not to exist, we are protected from "recursion being
fonctionnality meaningful", thus the valid FROM address list can be retrieved
using **(user + userAlias) x domainAlias** formula.
> [JMAP] Allow a user to send an email with a from address containing one of
> her alias
> ------------------------------------------------------------------------------------
>
> Key: JAMES-3032
> URL: https://issues.apache.org/jira/browse/JAMES-3032
> Project: James Server
> Issue Type: Improvement
> Affects Versions: 3.5.0
> Reporter: Rémi Kowalski
> Priority: Major
>
> Currently James checks that the user connected matches the user is the From
> header of a mail being sent.
> Instead, James should allow that the From header contains any alias of the
> connected user.
> This also matches the current JMAP specification security considerations:
> https://jmap.io/spec-mail.html#permission-to-send-from-an-address
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
---------------------------------------------------------------------
To unsubscribe, e-mail: server-dev-unsubscr...@james.apache.org
For additional commands, e-mail: server-dev-h...@james.apache.org
