On Sat, Sep 27, 2003, Shaul Karl wrote about "Re: mail origin verification": > Can't one find out where the message real origin is and which are the > faked servers by the message-id?
No, because the message-id, as any part of the message and its headers, can be easily faked. The only part of the message a sender cannot fake is the parts which are added after the message was transmitted, namely the topmost "Received:" lines. Further Received: lines, Message-Id: or any other headers, and the message body can all contain whatever arbitrary content the sender wishes it to contain - it needn't conform to any sort of "truth". -- Nadav Har'El | Sunday, Sep 28 2003, 2 Tishri 5764 [EMAIL PROTECTED] |----------------------------------------- Phone: +972-53-790466, ICQ 13349191 |Boat: A hole in the water surrounded by http://nadav.harel.org.il |wood into which one pours money. ================================================================= To unsubscribe, send mail to [EMAIL PROTECTED] with the word "unsubscribe" in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
