On Mon, 17 Oct 2016 15:20:27 +0200
Ralph Seichter wrote:
> On 17.10.16 02:38, Benny Pedersen wrote:
> > one could argue if From:Name and From:Addr have differing domains
> > its forged ?
> Which RFC defines "From:Name" and "From:Addr" (I don't see the terms
> in RFC5322), and where does it say that domain names must match if
> they are present? The header line
> From: "John Doe <j...@doe.org>" <j...@thedoefamily.net>
> is perfectly legitimate.
but an unusual and rather silly thing to do.
> Guessing whether or not domains are related
> is not something I'd like a piece of software to do.
Most of what SpamAssassin targets is RFC compliant. It would be
perfectly legitimate to score bogus addresses in the display name if
it proved useful.