Hi Renaud,
Renaud Allard wrote on Thu, Jun 06, 2019 at 07:47:24AM +0200:
> I was also reluctant at answering because I didn't know the mail
> address from the sender.
In addition to what sthen@ said: if you receive an email message
claiming to be *from an OpenBSD developer* and suspect a phishing
attempt for whatever reason, you can always reply to the @openbsd.org
address (in this case danj@) even when Reply-To: is not set. If it
was not phishing - perfect, from the reply, you now know the other
address is genuine, too. If it was phishing, the developer is likely
interested to learn that somebody is trying to impersonate them.
Either way, you should *really* reply to mail about your ports (as
opposed to obvious spam, of course), even when you suspect some
kind of phishing. A maintainer address is publicly advertised on
the Internet anyway, so there is no point in trying to hide the
fact from spammers that you do indeed reed incoming mail. Better
answer once to a spammer by mistake than ignore a user asking a
genuine question about your port.
Yours,
Ingo
P.S.
You see, me too, i'm typically sending From: a non-OpenBSD address
without setting Reply-To: - because direct replies are faster.
But there is certainly nothing wrong with writing to schwarze@,
many people do that.
No comments:
Post a Comment