[wp-trac] [WordPress Trac] #25239: $_SERVER['SERVER_NAME'] not a reliable when generating email host names

[WordPress Trac]

#25239: $_SERVER['SERVER_NAME'] not a reliable when generating email host names
-------------------------------------------------+-------------------------
 Reporter:  layotte                              |       Owner:
     Type:  defect (bug)                         |  SergeyBiryukov
 Priority:  normal                               |      Status:  reviewing
Component:  Mail                                 |   Milestone:  Future
 Severity:  normal                               |  Release
 Keywords:  has-patch dev-feedback needs-        |     Version:  3.8
  testing                                        |  Resolution:
                                                 |     Focuses:
-------------------------------------------------+-------------------------

Comment (by kitchin):

 Empty return-path is the age-old way of preventing bounces. Bounces
 themselves set an empty return-path, as do "out of the office" auto-
 responders. Return-path is part of the SMTP envelope, unlike message
 headers like return-to. Sorry if this information is bug spam for most
 people, but maybe it's not.

 We could both try to stop bounces AND use the owner email address, which
 we can assume has been affirmatively set up during install. It won't catch
 everything, due to the variety of setups, pluggables, filters, etc. And
 there might be legacy blowback. Imagine someone has written a filter that
 detects wordpress@! Too bad.

 Could send a security email advisory to the owner address during the
 upgrade.

--
Ticket URL: <https://core.trac.wordpress.org/ticket/25239#comment:78>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform