Developers of Sympa

[Serge Aumont <address@concealed>]

Dick Visser wrote:

> Hi list
>
> I have a question: which address does sympa use when authentication by 
> e-mail address?
> The From: address in the headers of the e-mail?

The From: header is used. We should say for "identification" not for 
"authentification" because it's really not a secure information and the 
listmaster can decide to use authorization scenario that always require 
a stronger authentication.

> Or the Envelope-From address?
>
> And what if they both exist and are different? 

The envelope-From is ignored, unless the Return-path header is tested in 
scenario (usually not used).

Serge Aumont