Isn’t it a security issue for Discourse to trust the email address in the From header, and to use this as part of its validation of incoming emails? I can set the From header to whatever I like.
ChrisBeach
(Chris)
10
Related topics
| Topic | Replies | Views | Activity | |
|---|---|---|---|---|
| Do not auto-create users when reply by mail | 2 | 1607 | May 19, 2017 | |
| Confused by Error Message From Reply-by-Email | 26 | 3344 | June 4, 2020 | |
| Reply by email - additional addresses | 28 | 2616 | August 19, 2019 | |
| Issue configuring reply by email: 553 5.7.1 Sender address rejected: not owned by user | 6 | 12895 | June 13, 2019 | |
| Difference between "reply by email address" and "alternative reply by email addresses" | 6 | 960 | June 9, 2022 |