3

We have a contact form with an email address field.

Let's say [email protected] will send an email using our contact form.

When it's submitted this is what the headers would look like:

From: "[email protected]" <[email protected]>
Reply-To: [email protected]

This seems to pass SPF, DKIM, DMARC, which is my goal.

My concern is, this somewhat spoofs the From Name and From Email. Is this an acceptable practice?

5
  • Why are you adding the noreply@ part of the header? Why not just make it be from [email protected]?
    – Steve
    Commented May 17, 2017 at 5:59
  • 1
    @Steve that will not pass SPF, DKIM, DMARC as that implies that the message was sent from @yahoo.com even if it's technically not because the real server where the message is coming from is from @ourdomain.com
    – IMB
    Commented May 17, 2017 at 7:30
  • If at all possible you should use the domain name to respond to anything coming in through your contact form. That is the professional and legitimate way to do it. Commented May 20, 2017 at 6:03
  • 1
    @MichaelMoriarty True but that's not really the issue here.
    – IMB
    Commented May 22, 2017 at 17:13
  • Question was, "My concern is, this somewhat spoofs the From Name and From Email. Is this an acceptable practice?" Answer: "No, it is not acceptable practice." Commented Jun 27, 2017 at 3:33

1 Answer 1

2

Yes, that's an acceptable practice. You could also append the users name and e-mail to the subject line or content if you want that information to be more visible to the recipient.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.