On 7/15/23 2:00 AM, Reindl Harald wrote:
SPF don't care about the visible From-header
I agree that SPF doesn't (SHOULDN'T) care about the RFC522.From header.However my experience has been that the vast majority of messages that are spoofing the RFC522.From header are also spoofing the RFC521.MailFrom which is squarely in SPF's domain.
Think of it as -- based on my experience -- a VERY STRONG but indirect correlation.
Grant. . . .