You are signed in. Close

You are signed out. Close

Thank you. Your subscription has started. Close

Thank you. You will get an email when a new comic comes out. Close

We could not confirm your payment. If you paid, use the link "Sign in" at the bottom of the page. Close

Something went wrong on our side. Please try again in a moment. Close

Previous episode SPF records: how a mail server knows which servers may send for a domain

How email works: why a fake email from your boss can reach your inbox

Envelope sender vs From: the two sender addresses of every email

Every email carries two sender addresses, and your phone only ever shows you one. Which one does the sender check really look at?

  1. 1 A week later, a new email from "Miva" reaches the workshop's server. The server runs SPF, as it now does for every email, and this time SPF passes.the workshop'smail serverSPF: pass

    A week later, a new email from "Miva" reaches the workshop's server. The server runs SPF, as it now does for every email, and this time SPF passes.

  2. 2 On your phone, the From line still says miva@woodshop.example, and Rono's server is still not on the workshop's list. Yet the check passed.From: miva@woodshop.exampleSubject: Pay the oak supplier today?

    On your phone, the From line still says miva@woodshop.example, and Rono's server is still not on the workshop's list. Yet the check passed.

The rest of this episode is for subscribers

Subscribe to read every premium episode. You can cancel when you want.

Paid yearly: $99 instead of $119.88

Next episode DKIM: how a mail server signs the emails it sends

Share this comic

More comics