atom / atom.io

🌐 A place for feedback on the atom.io website and package API
161 stars 98 forks source link

Contact form attempts to impersonate sender's address #109

Open dustinwilson opened 7 years ago

dustinwilson commented 7 years ago

The contact form sends emails with the From field set to the sender's address. This is problematic because of SPF, DKIM, and DMARC policies. I attempted to send an email yesterday with a request to remove an orphaned package in my atom.io profile which was then quarantined by google's servers because it was seen as spoofing my email.

The contact form should instead send the email from an atom.io address with a Reply-To field set with the sender's address.