From 04c6d1770825c123a5c6c326b5f712e4a41bc94a Mon Sep 17 00:00:00 2001
From: Josia Pietsch <git@jrpie.de>
Date: Fri, 4 Oct 2024 17:05:29 +0200
Subject: [PATCH] [mail-mailboxes] add warning that SMTP server does not reject
 sender login mismatch

---
 source/mail-mailboxes.rst | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/source/mail-mailboxes.rst b/source/mail-mailboxes.rst
index 5d2f7e9..31cbdbb 100644
--- a/source/mail-mailboxes.rst
+++ b/source/mail-mailboxes.rst
@@ -29,6 +29,9 @@ To add a new mailbox to your Uberspace, run the ``uberspace mail user add <mailb
 .. tip::
   Nothing is shown while entering your password; that’s absolutely correct and works as intended – just enter it blindly and press Enter!
 
+.. warning::
+  The mail server does not check whether the sender (envelope sender, From: header) of an outgoing mail "belongs" to a certain mailbox. Thus if you have two mailboxes ``alice`` and ``eve``, Eve can also send mails from ``alice@username.uber.space``.
+
 .. warning::
   While some special characters such as ``.``, ``+``, ``-``, ``_`` are allowed in mailbox names, there are `rules <https://en.wikipedia.org/wiki/Email_address#Local-part>`_ limiting their usage. Please make sure your mailbox name adheres to these rules.