John Levine wrote: > it's not our problem. Agreed? +1 Maybe add a paragraph to the security considerations explaining that ADSP is about syntactically valid 2822upd messages especially wrt From: header fields. Frank