Allow Group Inboxes to use default outbound SMTP settings

Feature
1

Summary

Presently there is no way to use the Group Inboxes feature without configuring an additional user account specifically for sending mail.

The screenshot shows an error message in a form requesting SMTP server, port, username, and password with the ampersand character flagged as an error, and “SSL Mode” set to “None.” (Captioned by AI)
The screenshot shows an error message in a form requesting SMTP server, port, username, and password with the ampersand character flagged as an error, and “SSL Mode” set to “None.” (Captioned by AI)1314×1021 97.9 KB

However, a site may be in an environment where it can send email from arbitrary addresses by using the default mail configuration and the net result would be correct.

Group Inboxes should enable a site admin to configure an arbitrary address here and specify only the From Alias.

Security considerations

A site hosted in an environment where the platform owner is not the same as the site owner (e.g. our own hosting platform) would leave the platform exposed to address forging / spamming.

To enable the above usage we will probably need some sort of hidden allowlist for permitted addresses to be used in this manner.

4 Likes