Spoofing problem

[Gary]

We made this announcement some years back, which describes how eM Client is not vulnerable to spoofing:

eM Client and Mailsploit

A short while ago Mailsploit released their list of email clients they tested for vulnerability to Spoofing and XSS/Code Injection. eM Client ranked as unaffected by these mail sploits but some users were not sure about the outcome when they tested the behavior themselves, so we’d like to address it. Our default setting in Menu>Tools>Settings>Mail>Read is to show Display name only. Display name can be set to anything, but spoofing tries to replace the actual email address in this view. So when …