TE
科技回声
首页24小时热榜最新最佳问答展示工作
GitHubTwitter
首页

科技回声

基于 Next.js 构建的科技新闻平台,提供全球科技新闻和讨论内容。

GitHubTwitter

首页

首页最新最佳问答展示工作

资源链接

HackerNews API原版 HackerNewsNext.js

© 2025 科技回声. 版权所有。

Ask HN: Why are most web services "spoofing" the From email header?

2 点作者 boronine超过 1 年前
All examples below are &quot;From&quot; headers in emails sent from various web services to our corporate email. This makes it look like we are sending emails to ourselves.<p>Some examples:<p><pre><code> &quot;&#x27;Amazon Web Services&#x27; via Redacted - Admin&quot; &lt;admin@redacted.com&gt; &#x27;Mezmo, Inc.&#x27; via Redacted Inc. - Admin &lt;admin@redacted.com&gt; &#x27;service@intl.paypal.com&#x27; via Redacted - Admin &lt;admin@redacted.com&gt; noreply-spamdigest via Redacted - Support &lt;support@redacted.com&gt; &#x27;Shopify Partners&#x27; via Redacted Inc. - Admin &lt;admin@redacted.com&gt; </code></pre> Some notable exceptions:<p><pre><code> Heroku Billing Team &lt;team.notifications@herokumanager.com&gt; Wise &lt;info@wise.com&gt; </code></pre> Questions:<p>1. What could be the justification for this practice?<p>2. Does this practice have a name?<p>3. Is this not considered spoofing?<p>4. Reading plainly, &quot;X via Y&quot; implies that Y is facilitating something on behalf of X, is this the intended reading?

1 comment

sacrosanct超过 1 年前
If the shop is doing DMARC[0] &amp; DKIM[1] this is a non-issue<p>[0] <a href="https:&#x2F;&#x2F;en.m.wikipedia.org&#x2F;wiki&#x2F;DMARC" rel="nofollow">https:&#x2F;&#x2F;en.m.wikipedia.org&#x2F;wiki&#x2F;DMARC</a><p>[1] <a href="https:&#x2F;&#x2F;en.m.wikipedia.org&#x2F;wiki&#x2F;DomainKeys_Identified_Mail" rel="nofollow">https:&#x2F;&#x2F;en.m.wikipedia.org&#x2F;wiki&#x2F;DomainKeys_Identified_Mail</a>
评论 #39181012 未加载