Bob Proulx wrote:
Who to forge? The answer is "Everyone!" Any address that can be
obtained from a spam-virus infected PC and any address that can be
harvested from a web page. Forge them all. They are (mostly) valid
email addresses and will pass sender verification. Send To: and From:
all of them.
You're going out of your way to miss the point. That's hard work
Yes, a spammer can forge anyone. Can they forge the exact e-mail
addresses used by people I correspond with regularly? Not in my
experience. Can they forge my e-mail to me? Easily.
