[
https://issues.apache.org/jira/browse/JAMES-3038?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17030811#comment-17030811
]
Raphael Ouazana commented on JAMES-3038:
----------------------------------------
I think this should be configurable. Unless there is any SMTP RFC stating that
this should be the case.
For JMAP there is no such debate because it's included in the RFC.
> [SMTP] Allow a user to send an email from on of her alias
> ---------------------------------------------------------
>
> Key: JAMES-3038
> URL: https://issues.apache.org/jira/browse/JAMES-3038
> Project: James Server
> Issue Type: Improvement
> Affects Versions: 3.5.0
> Reporter: Rémi Kowalski
> Priority: Major
>
> Currently James checks that the user connected matches the user is the From
> header of a mail being sent.
> Instead, James should allow that the From header contains any alias of the
> connected user.
> The alias the user can send from should be the one from its user alias and
> domain alias.
> It should not be allowed to send from a group alias.
> This also matches the current JMAP specification security considerations:
> [https://jmap.io/spec-mail.html#permission-to-send-from-an-address]
>
> It is the equivalent for the SMTP protocol of
> https://issues.apache.org/jira/browse/JAMES-3032 which targeted JMAP.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
