[baystep]

Right, which I figured if there was any viable way to get sender-identification working then that would be solved at the initial point. Like HTTPS requiring a Certificate Authority to vouch for you. With out the certificate, the receiving server could effectively reject it. Should stop all those pesky SMTP senders claiming to be X website as well. You know, since for some brilliant reason the "from" field is just taken from input, you can type anything you want in there.