Hacker News Reader

but the fun thing about them is, they allow you to impersonate any mail address you want with their smtp server.

Aka, when you are a customer of them you get a @t-online.de address and login data for their smtp server.

You can just login into that server and set the From: Header to anything, they don't check.

Isn't that fairly common? You could then put in some other address, but you could do the same thing by setting up your own mail server, and in the former case you're not even really anonymous because the headers are going to show it was sent through their mail server and their mail server's logs will show which account was used to send the message.

The email sent from your own separate server will fail basic dmarc/SPF/dkim validation the email sent by their own servers likely will appear legitimate

It would fail in the same ways unless the from address you're using is on their domains, which is then only a problem for their own customers rather than innocent third parties, and their own customers have the sensible option to stop using their service.

In Germany I'd be surprised if the police didn't come to your house when you did that, and take all your computers to find evidence you sent it, and you're not getting them back even if you're proven innocent.

Reply on news.ycombinator.com