On 9/24/2015 2:08 AM, Tony Finch wrote: > The user should notice this since their encrypted mail will appear to come > from their mail provider not from the sender. (PGP signature doesn't > match 822 From:) Any security enforcement model that is based on having an end user 'notice' something is a model that will fail nearly every time. d/ -- Dave Crocker Brandenburg InternetWorking bbiw.net