Bob Proulx wrote:
> Who to forge? The answer is "Everyone!" Any address that can be
> obtained from a spam-virus infected PC and any address that can be
> harvested from a web page. Forge them all. They are (mostly) valid
> email addresses and will pass sender verification. Send To: and From:
> all of them.


You're going out of your way to miss the point. That's hard work

Yes, a spammer can forge anyone. Can they forge the exact e-mail
addresses used by people I correspond with regularly? Not in my
experience. Can they forge my e-mail to me? Easily.