jaaredroach wrote:
Using "Reply-To" has many wonderful uses, but it also can be weaponized by spammers. This practice has come to be known as 'spoofing'.
Use of the Reply-To header has nothing to do with e-mail spoofing. With true e-mail spoofing, spammers or scammers take advantage of malicious or poorly configured servers to send an e-mail with a fraudulent "From" address. Reply-to is not necessary at all.
As a result, many spam-blocker software will treat _all_ email with a "Reply-To" header as spam.
If they are doing that, then they are doing it wrong. It wouldn't surprise me. There is a log of fraudulent and scam software being used to. "Security" software is particularly notable for this kind of fake security that does more harm than good.
So if one uses a "Reply-To" header, there is a good chance that your intended recipient will never get that email, because they are downstream of an overly aggressive spam-blocker.
In spite of everything that I've said, I don't disagree with this. I have no data to confirm it, but it sounds plausible. There are lots of scam ware security apps installed in the world. I don't know what it is, but scam apps are extremely successful. It's like printing money.
I run a software business where I send out a fair amount of automated, but legitimate e-mails -namely purchase receipts and license codes - people should want those and keep them. A significant portion of this e-mail never arrives. It isn't even unusual for recipients to flag those receipts and license code e-mails as spam.
So yeah, e-mail is definitely not reliable.
So it may be best practices in some instances to not use a "Reply-To" header, whatever its other advantages might be in that context. Therefore, if one has been using a "Reply-To" header in the past, it might be useful to stop using it. This is true in Macintosh / Apple Mail. And probably universally true.
If you aren't actively using "Reply-to" then there is nothing you need to do. I don't really think that usage of "Reply-to" is going to be any more likely to cause a problem than any other headers. E-mail itself is simply not reliable. I regularly get a lot of junk mail and I regularly have to go into my Office 365 quarantine folder and pull out the legitimate e-mails that have been miscategorized as junk.