On 7/6/23 9:42 AM, Bill Gunshannon wrote:
Doesn't the list check addresses to see if the
poster is a member?
This has never been a good test. It really only works to reject blatant
unwanted messages.
It's trivial to lie and say that a message is from someone that it is
not from. Both SMTP envelope and message headers.
It's somewhat more difficult to successfully spoof some domains than
others, depending on the spoofed domain's security posture; e.g. SPF,
DKIM, DMARC.
Grant. . . .