Ask HN: Why are most web services spoofing the "From" header?

https://news.ycombinator.com/item?id=38745137
by boronine • 3 years ago
3 0 3 years ago

Some examples:

    "'Amazon Web Services' via Redacted - Admin" <admin@redacted.com>
    'Mezmo, Inc.' via Redacted Inc. - Admin <admin@redacted.com>
    'service@intl.paypal.com' via Redacted - Admin <admin@redacted.com>
    noreply-spamdigest via Redacted - Support <support@redacted.com>
    'Shopify Partners' via Redacted Inc. - Admin <admin@redacted.com>
It seems that most services are doing this. Some notable exceptions:
    Heroku Billing Team <team.notifications@herokumanager.com>
    Wise <info@wise.com>
What on earth could be the justification for this practice? How is this not considered spoofing?

Related Stories

Loading related stories...

Source preview

news.ycombinator.com