Is it acceptable/common for an SMTP server to not verify the From-Address of authenticated users?

I have an account within an organisation that provides e-mail-services within their infrastructure. These can be connected to via IMAP/SMTP and Exchange and always require password authentication. Today I learned that when I change the Fro… Continue reading Is it acceptable/common for an SMTP server to not verify the From-Address of authenticated users?

Why it is so widely tolerated to allow SMTP server in DMZ to initiate connection to the LAN

I was surprised to see that the French cybersecurity agency tolerates an SMTP relay server in the DMZ (which collects emails received from the Internet) to reach the Email server in the LAN.
In my opinion, the relay SMTP server in the DMZ … Continue reading Why it is so widely tolerated to allow SMTP server in DMZ to initiate connection to the LAN

Why does e-mail (SMTP) "bounce around" e-mails instead of just connecting directly? (Does it even still?) [closed]

Here’s something I’ve struggled to comprehend since I first heard about e-mails long ago.
Why would e-mails "bounce around" from server to server until received at the final destination, allowing those to snoop on my messages/fil… Continue reading Why does e-mail (SMTP) "bounce around" e-mails instead of just connecting directly? (Does it even still?) [closed]