[wp-trac] [WordPress Trac] #60420: Default wordpress at site.com sender address can be problematic

[WordPress Trac]

#60420: Default wordpress at site.com sender address can be problematic
-----------------------------+------------------------------
 Reporter:  thinlinecz       |       Owner:  (none)
     Type:  feature request  |      Status:  reopened
 Priority:  normal           |   Milestone:  Awaiting Review
Component:  Mail             |     Version:  1.5.1.2
 Severity:  normal           |  Resolution:
 Keywords:  close            |     Focuses:
-----------------------------+------------------------------

Comment (by amanandhishoe):

 Addresses designated to handle bounces in an email’s envelope (the Return-
 Path / MAIL FROM address) exist for one primary purpose: receiving and
 processing delivery failure reports. In practice, they serve several
 distinct but related functions:
         •       Receive non-delivery reports
         •       Enable automated bounce processing
         •       Support SPF, DKIM, and DMARC alignment
         •       Prevent backscatter and forged replies

 What envelope bounce addresses do not do:
 They are not intended for:
         •       Human replies
         •       Customer support
         •       User-visible communication

 Those functions belong to the From or Reply-To headers, not the envelope.

 It is critical that a valid email address exists in the email’s envelope
 (the Return-Path / MAIL FROM address). This address is entirely
 independent of the visible From address. Humans do not read bounces or
 failure notices sent to the envelope address; they are handled by
 automated mail systems and bounce-processing software.

 Because the envelope is created and finalized by the underlying mail
 transfer agent (MTA) or transactional email service, WordPress itself is
 not in a position to reliably define or manage the envelope sender.
 Attempting to do so at the application level risks misalignment with host-
 or provider-level mail configuration and can lead to delivery and
 authentication failures.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/60420#comment:48>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform