[ietf-dkim] A funny thing happened at RSA...

[Powers, Jot]

On 4/11/08 6:07 PM, "Tony Hansen" <tony at att.com> scribbled:

> One more question: what is Yahoo! looking at to determine "allegedly
> from paypal.com"? My guess is some subset of the From: header field, the
> Sender: header field, the Reply-To: header field, the 821.MailFrom
> return path, the Resent-From: header field, the Resent-Sender: header
> field, or do they look for something something else entirely?

I believe it is either 821.MailFrom and/or From.

-Jot
-- 
Jot Powers             <jpowers at paypal.com>
Phone: 480-862-7234    Cell: 480-221-1157
Skype: jotebay