Jo Rhett wrote: > Bob Proulx wrote: > >I disagree with the premise that it is hard to forge mail from someone > >you correspond with frequently. It is equally easy to forge. > > Easy to forge, but who to forge? Hard for a spammer to know who I > correspond with frequently. Myself is the only one a spammer could > guess.
Who to forge? The answer is "Everyone!" Any address that can be obtained from a spam-virus infected PC and any address that can be harvested from a web page. Forge them all. They are (mostly) valid email addresses and will pass sender verification. Send To: and From: all of them. Bob
