On Mon, 6 Mar 2017 23:22:00 +0000 David Jones <djo...@ena.com> wrote:
[...] > Not good. SPF should be checked against the envelope-from > address which is more trustworthy. Er... well. The envelope-from is not any more trustworthy than the header From:. But it *is* the thing the SPF spec say to check, and *not* the header From:. Regards, Dianne.
