Fake du email

[CloudWatcher]

1. unlikely

Email headers are trivial to fake. If you want to, you can review the 'raw email headers' and figure out from the normally hidden headers whether or not it actually came from DU. But generally it's easier to just not believe addresses in email and assume it's forged.

Ages ago (I think it was 1979) I demonstrated to my boss how easy it was to fake an email to him from his boss, accepting his resignation. The email protocols are only a tiny bit more secure now. They're just not designed to be secure.

I get email all the time, forging my email address as the sender, claiming that they've broken into my computer and sent me mail after logging in as me. It's never true.