update the towncrier entry

2 years ago · cc2c308d1d
parent 8775a2bf04
commit cc2c308d1d
1 changed files with 1 additions and 1 deletions
--- a/towncrier/newsfragments/2475.feature
+++ b/towncrier/newsfragments/2475.feature
@ -1 +1 @@
-Remove the strict anti-spoofing rule. In 2022 we should have other controls (SPF/DKIM) for dealing with authorization and shouldn't assume that Mailu is the only MTA allowed to send emails on behalf of the domains it hosts.
+Upgrade the anti-spoofing rule. We shouldn't assume that Mailu is the only MTA allowed to send emails on behalf of the domains it hosts... but we should also ensure that both the envelope from and header from are checked.