Hacker News new | ask | show | jobs
by romanixromanix 1867 days ago
>> Emails with multiple "From" fields in the headers

Do you think this is still possible?

2 comments

Sure better be, for the sake of backwards compatibility.

This isn't a problem for mail transport as the recipient is specified in the envelope and the message itself is not examined.

What a client should do in such a case is unclear. I suspect that they all use the first one encountered and ignore the rest.

Multiple From: fields are allowed by https://tools.ietf.org/html/rfc5322#section-3.6.2 as long as a Sender: is also included.
Just to be precise: It's a single From field with several addresses, not multiple From fields (see https://tools.ietf.org/html/rfc5322#page-21).

RFC 6854 updated the From field to allow an empty group construct (see https://explained-from-first-principles.com/email/#no-reply) but mainly for other reasons (see https://explained-from-first-principles.com/email/#email-add...).

DMARC authentication either rejects multiple addresses in the From field or authenticates them all and applies the most strict policy (see https://explained-from-first-principles.com/email/#domain-ba...).