Email source spoofing allows senders to bypass spam filters and protections such as Domain-based Message Authentication, Reporting and Conformance (DMARC). Several email clients, including
Apple Mail and Thunderbird, “bungled” their implementation of a protective RFC, says penetration tester Sabri Haddouche.
Read the whole story at The Register »