| 1 |
On Mon, 4 Dec 2017 18:01:39 -0500 |
| 2 |
"William L. Thomson Jr." <wlt-ml@××××××.com> wrote: |
| 3 |
|
| 4 |
> On Mon, 4 Dec 2017 14:43:15 -0800 |
| 5 |
> Matt Turner <mattst88@g.o> wrote: |
| 6 |
> > |
| 7 |
> > Sorry. I think I was confusing a number of irritating things you've |
| 8 |
> > done: email spoofing, |
| 9 |
> |
| 10 |
> That was a complete accident due to a new version of Kmail that had |
| 11 |
> the from field editable by default. It was NOT intentional. Not the |
| 12 |
> 1st time. The 2nd time was for confirmation. I was in disbelieve such |
| 13 |
> abuse was even possible with @gentoo.org addresses. That was a |
| 14 |
> shocking discovery given I have administrated mail severs for quite |
| 15 |
> some time. In part why I use ASSP. |
| 16 |
|
| 17 |
I filed a bug with KDE on that but of course went WONTFIX. I think its |
| 18 |
horrible as it allows people to spoof, spam and do bad things... |
| 19 |
|
| 20 |
Make From field in the composer read only |
| 21 |
https://bugs.kde.org/show_bug.cgi?id=373313 |
| 22 |
|
| 23 |
Me personally I would never make software or change it to allow people |
| 24 |
to make such a mistake. Others felt differently. I stopped using |
| 25 |
Kmail2. I use Claws-mail now, but it also has editable from field.... :( |
| 26 |
|
| 27 |
Email clients should only allow email address that are in configured |
| 28 |
accounts. But that is my opinion. Others seem to feel differently. I |
| 29 |
cannot see any good reasons for such really. |
| 30 |
|
| 31 |
-- |
| 32 |
William L. Thomson Jr. |
Archives