Ask HN: Why are most web services spoofing the "From" header?

3 points

3 years ago

Some examples:

    "'Amazon Web Services' via Redacted - Admin" <admin@redacted.com>
    'Mezmo, Inc.' via Redacted Inc. - Admin <admin@redacted.com>
    'service@intl.paypal.com' via Redacted - Admin <admin@redacted.com>
    noreply-spamdigest via Redacted - Support <support@redacted.com>
    'Shopify Partners' via Redacted Inc. - Admin <admin@redacted.com>

It seems that most services are doing this. Some notable exceptions:

    Heroku Billing Team <team.notifications@herokumanager.com>
    Wise <info@wise.com>

What on earth could be the justification for this practice? How is this not considered spoofing?

No comments

No comments