Prevent unnecessary obfuscation of From addresses to increase phishing prevention
Scenario:
If I send an email using one of my own passmail alias to a regular email address, I will receive responses from an address that has been obfuscated through passmail.
For example
- I send an initial email from "personal.alias.aw3kl44@passmail.net" to "support@acmecorp.com"
- I receive a response from "supportatacmecorp_com.98ayuj@passmail.net"
Problem:
This is problematic because I'm now unable to validate the sending address of the response. Is this a legitimate response or a phishing attempt?
Expected result:
If I send an email to target address, I expect the response to be from the exact same address or, at very least, from an address on the same domain. Otherwise there is not reason for me to trust the validity of the response.
3
votes