ASSP development mailing list <assp-test@lists.sourceforge.net>
schreibt:
>
>The better question is... when evaluating these requests, does ASSP
>consider the 'From' *header*, or the *envelope sender*?
>
>Anything other than the envelope sender is easily spoofed and should
>never be used for administrative tasks like this.


ASSP looks always for the envelope sender ("mailfrom" in assp-dev
speak). Logging also shows always the mailfrom. There are ->options to
look into other parts -> additionally.

------------------------------------------------------------------------------

_______________________________________________
Assp-test mailing list
Assp-test@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-test

Reply via email to