| 2023-08-01 05:23:11 |
Nobuto Murata |
description |
When I'm subscribed to a bug, I get email notifications from launchpad.net. And the emails trigger the phising warning always in Gmail as follows:
https://support.google.com/mail/answer/1074268?hl=en
> Be careful with this message
>
> Nobuto Murata is similar to a name in your organization, but the email
> address does not belong to your domain or Canonical Mail couldn’t
> verify that it actually came from 2029188@bugs.launchpad.net. Avoid
> replying to this email unless you reach out to the sender by other
> means to ensure that this email address is legitimate.
>
> Report phising | Looks safe
That's because Launchpad uses the From: header as:
From: "LAUNCHPAD USERNAME" <BUG_NUMBER@bugs.launchpad.net>
e.g. From: Nobuto Murata <2029188@bugs.launchpad.net>
And Gmail or other mailers think random email addresses (1@bugs.launchpad.net, 2000000@bugs.launchpad.net, 2029188@bugs.launchpad.net, etc.) try to impersonate the same "LAUNCHPAD USERNAME".
It would be nice if Launchpad sends those emails from something like:
From: "LAUNCHPAD USERNAME" via Launchpad.net <notifications@bugs.launchpad.net> |
When I'm subscribed to a bug, I get email notifications from launchpad.net. And the emails trigger the phising warning always in Gmail as follows:
https://support.google.com/mail/answer/1074268?hl=en
> Be careful with this message
>
> Nobuto Murata is similar to a name in your organization, but the email
> address does not belong to your domain or Canonical Mail couldn’t
> verify that it actually came from 2029188@bugs.launchpad.net. Avoid
> replying to this email unless you reach out to the sender by other
> means to ensure that this email address is legitimate.
>
> Report phising | Looks safe
That's because Launchpad uses the From: header as:
From: "LAUNCHPAD USERNAME" <BUG_NUMBER@bugs.launchpad.net>
e.g. From: Nobuto Murata <2029188@bugs.launchpad.net>
And Gmail or other mailers think random email addresses (1@bugs.launchpad.net, 2000000@bugs.launchpad.net, 2029188@bugs.launchpad.net, etc.) try to impersonate the same "LAUNCHPAD USERNAME".
It would be nice if Launchpad sends those emails from something like:
From: "LAUNCHPAD USERNAME" via Launchpad.net <notifications@bugs.launchpad.net>
to be aligned with the industry best practices and other services, Discourse etc. are taking a similar approach. |
|
