Email source spoofing allows senders to bypass spam filters and protections such as Domain-based Message Authentication, Reporting and Conformance (DMARC). Several email clients, including Apple Mail and Thunderbird, “bungled” their implementation of a protective RFC, says penetration tester Sabri Haddouche.