Email::Address easily spoofed

2010-01-04 Thread Justin Skazat
I'm starting to get reports from users who are saying my code that relies on Email::Address is getting spoofed. Here's a small example: #!/usr/bin/perl use strict; use Email::Address; my $from = q...@example.com spoofer.addr...@malicious-site.com}; my $from2 = q{m...@example.com

Re: Email::Address easily spoofed

2010-01-05 Thread Justin Skazat
Justin, Justin Skazat wrote: I'm starting to get reports from users who are saying my code that relies on Email::Address is getting spoofed. Here's a small example: [...] my $from = q...@example.com spoofer.addr...@malicious-site.com}; [...] As you can see, it just takes the phrase

Re: Email::Address easily spoofed

2010-01-06 Thread Justin Skazat
On Jan 6, 2010, at 6:14 AM, Hans Dieter Pearcey wrote: If you are relying on From (or Sender) headers for access control, you have already lost. Almost every part of the email header and SMTP transaction can be faked by a malicious user. OK - my apologies for such foolish questions, but