4 edited body
source | link

When I receive a payment in PayPal, it sends me an email about it (pictured below). The problem is that the email is shown to be coming from the money sender's email address and not from PayPal itself, even though the real sender is PayPal.

Email from paypal

Here is the text that appears when I select "show original" in Gmail:

From: "contact@webnewsinc"contact@wxxxxxxxxx.com" <contact@webnewsinc<contact@wxxxxxxxxx.com>  
Sender: sendmail@paypal.com

So you can see that the real sender is PayPal.

If PayPal can spoof the email sender so easily, and Gmail does not recognize it, does it mean that anybody can spoof the email sender address and Gmail will not recognize it?

When I send emails to Gmail myself using telnet, the email comes with the warning:

This message may not have been sent by: xxxxx@xxxxx.com

Is this a security issue? Because if I am used to the fact that payment emails in PayPal appear to come from the money sender's email and not from PayPal, then the sender can just spoof the payment himself by sending a message like that from his email, and I may think that this is the real payment.

Is this something specific to PayPal, or can anybody fool Gmail like that? And if anybody can, what is the exact method that PayPal is using to fool Gmail?

When I receive a payment in PayPal, it sends me an email about it (pictured below). The problem is that the email is shown to be coming from the money sender's email address and not from PayPal itself, even though the real sender is PayPal.

Email from paypal

Here is the text that appears when I select "show original" in Gmail:

From: "contact@webnewsinc.com" <contact@webnewsinc.com>  
Sender: sendmail@paypal.com

So you can see that the real sender is PayPal.

If PayPal can spoof the email sender so easily, and Gmail does not recognize it, does it mean that anybody can spoof the email sender address and Gmail will not recognize it?

When I send emails to Gmail myself using telnet, the email comes with the warning:

This message may not have been sent by: xxxxx@xxxxx.com

Is this a security issue? Because if I am used to the fact that payment emails in PayPal appear to come from the money sender's email and not from PayPal, then the sender can just spoof the payment himself by sending a message like that from his email, and I may think that this is the real payment.

Is this something specific to PayPal, or can anybody fool Gmail like that? And if anybody can, what is the exact method that PayPal is using to fool Gmail?

When I receive a payment in PayPal, it sends me an email about it (pictured below). The problem is that the email is shown to be coming from the money sender's email address and not from PayPal itself, even though the real sender is PayPal.

Email from paypal

Here is the text that appears when I select "show original" in Gmail:

From: "contact@wxxxxxxxxx.com" <contact@wxxxxxxxxx.com>  
Sender: sendmail@paypal.com

So you can see that the real sender is PayPal.

If PayPal can spoof the email sender so easily, and Gmail does not recognize it, does it mean that anybody can spoof the email sender address and Gmail will not recognize it?

When I send emails to Gmail myself using telnet, the email comes with the warning:

This message may not have been sent by: xxxxx@xxxxx.com

Is this a security issue? Because if I am used to the fact that payment emails in PayPal appear to come from the money sender's email and not from PayPal, then the sender can just spoof the payment himself by sending a message like that from his email, and I may think that this is the real payment.

Is this something specific to PayPal, or can anybody fool Gmail like that? And if anybody can, what is the exact method that PayPal is using to fool Gmail?

    Tweeted twitter.com/#!/StackSecurity/status/144240415544049664
3 Proper capitlisation of brands; Work the image more fluently into the body; Show the email headers properly, having to use the code block
source | link

How can paypalPayPal spoof emails so easily to say it comes from someone else?

When I receive a payment in PaypalPayPal, it sends me an email about it; I have attached an imageit (pictured below). The problem is that the email is shown to be coming from the money sender's email address and not from paypalPayPal itself, even though the real sender is paypalPayPal.

Email from paypal

Here is the text that appears when I select "show original" in gmailGmail:

From: "contact@webnewsinc.com"
Sender: sendmail@paypal.com

From: "contact@webnewsinc.com" <contact@webnewsinc.com>  
Sender: sendmail@paypal.com

So you can see that the real sender is PaypalPayPal.

The question is, if paypalIf PayPal can spoof the email sender so easily, and gmailGmail does not recognize it, does it mean that anybody can spoof the email sender address and gmailGmail will not recognize it? Because when

When I send emails to gmailGmail myself using telnet, the email comes with "This message may not have been sent by: xxxxx@xxxxx.com"the warning. :

This message may not have been sent by: xxxxx@xxxxx.com

SurelyIs this is a security issue? Because if I am used to the fact that payment emails in paypalPayPal appear to come from the money sender's email and not from paypalPayPal, then the sender can just spoof the payment himself by sending a message like that from his email, and I may think that this is the real payment.

Is this something specific to paypalPayPal, or can anybody fool gmailGmail like that.? And if anybody can, what is the exact method that paypalPayPal is using to fool gmailGmail?

Email from paypal

How can paypal spoof emails so easily?

When I receive a payment in Paypal, it sends me an email about it; I have attached an image below. The problem is that the email is shown to be coming from the money sender's email address and not from paypal itself, even though the real sender is paypal.

Here is the text that appears when I select "show original" in gmail:

From: "contact@webnewsinc.com"
Sender: sendmail@paypal.com

So you can see that the real sender is Paypal.

The question is, if paypal can spoof email sender so easily, and gmail does not recognize it, does it mean that anybody can spoof email sender address and gmail will not recognize it? Because when I send emails to gmail myself using telnet, the email comes with "This message may not have been sent by: xxxxx@xxxxx.com" warning.

Surely this is a security issue? Because if I am used to the fact that payment emails in paypal appear to come from money sender's email and not from paypal, then sender can just spoof the payment himself by sending a message like that from his email, and I may think that this is the real payment.

Is this something specific to paypal, or can anybody fool gmail like that. And if anybody can, what is the exact method that paypal is using to fool gmail?

Email from paypal

How can PayPal spoof emails so easily to say it comes from someone else?

When I receive a payment in PayPal, it sends me an email about it (pictured below). The problem is that the email is shown to be coming from the money sender's email address and not from PayPal itself, even though the real sender is PayPal.

Email from paypal

Here is the text that appears when I select "show original" in Gmail:

From: "contact@webnewsinc.com" <contact@webnewsinc.com>  
Sender: sendmail@paypal.com

So you can see that the real sender is PayPal.

If PayPal can spoof the email sender so easily, and Gmail does not recognize it, does it mean that anybody can spoof the email sender address and Gmail will not recognize it?

When I send emails to Gmail myself using telnet, the email comes with the warning:

This message may not have been sent by: xxxxx@xxxxx.com

Is this a security issue? Because if I am used to the fact that payment emails in PayPal appear to come from the money sender's email and not from PayPal, then the sender can just spoof the payment himself by sending a message like that from his email, and I may think that this is the real payment.

Is this something specific to PayPal, or can anybody fool Gmail like that? And if anybody can, what is the exact method that PayPal is using to fool Gmail?

2 deleted 52 characters in body
source | link

When I receive a payment in Paypal, it sends me an email about it; I have attached an image below.
The The problem is that the email is shown to be coming from the money sender's email address and not from paypal itself, even though the real sender is paypal.

Here is the text that appears when I select "show original" in gmail:

From: "contact@webnewsinc.com"
Sender: sendmail@paypal.com

So you can see that the real sender is Paypal.
The

The question is, if paypal can spoof email sender so easily, and gmail does not recognize it, does it mean that anybody can spoof email sender address and gmail will not recognize it? Because when I send emails to gmail myself using telnet, the email comes with "This message may not have been sent by: xxxxx@xxxxx.com" warning. 

And don't you thinkSurely this is a security issue? Because if I am used to the fact that payment emails in paypal appear to come from money sender's email and not from paypal, then sender can just spoof the payment himself by sending a message like that from his email, and I may think that this is the real payment.

What I want to know is whetherIs this is something specific to paypal, or whether anybody can anybody fool gmail like that. And if anybody can, what is the exact method that paypal is using to fool gmail?

Email from paypal

When I receive a payment in Paypal, it sends me an email about it; I have attached an image below.
The problem is that the email is shown to be coming from the money sender's email address and not from paypal itself, even though the real sender is paypal.

Here is the text that appears when I select "show original" in gmail:

From: "contact@webnewsinc.com"
Sender: sendmail@paypal.com

So you can see that the real sender is Paypal.
The question is, if paypal can spoof email sender so easily, and gmail does not recognize it, does it mean that anybody can spoof email sender address and gmail will not recognize it? Because when I send emails to gmail myself using telnet, the email comes with "This message may not have been sent by: xxxxx@xxxxx.com" warning.

And don't you think this is a security issue? Because if I am used to the fact that payment emails in paypal appear to come from money sender's email and not from paypal, then sender can just spoof the payment himself by sending a message like that from his email, and I may think that this is the real payment.

What I want to know is whether this is something specific to paypal, or whether anybody can fool gmail like that. And if anybody can, what is the exact method that paypal is using to fool gmail?

Email from paypal

When I receive a payment in Paypal, it sends me an email about it; I have attached an image below. The problem is that the email is shown to be coming from the money sender's email address and not from paypal itself, even though the real sender is paypal.

Here is the text that appears when I select "show original" in gmail:

From: "contact@webnewsinc.com"
Sender: sendmail@paypal.com

So you can see that the real sender is Paypal.

The question is, if paypal can spoof email sender so easily, and gmail does not recognize it, does it mean that anybody can spoof email sender address and gmail will not recognize it? Because when I send emails to gmail myself using telnet, the email comes with "This message may not have been sent by: xxxxx@xxxxx.com" warning. 

Surely this is a security issue? Because if I am used to the fact that payment emails in paypal appear to come from money sender's email and not from paypal, then sender can just spoof the payment himself by sending a message like that from his email, and I may think that this is the real payment.

Is this something specific to paypal, or can anybody fool gmail like that. And if anybody can, what is the exact method that paypal is using to fool gmail?

Email from paypal

    Post Migrated Here from superuser.com
1
source | link