Restrict SMTP user to one domain
planned
Agathe Brusset
marked this post as
planned
Agathe Brusset
Merged in a post:
Option to set only a specific "From" email address for sending emails
S
Sunny Marmoset
If would be great if we could have the option to restrict sending to only one specific account or sender email address.
If the API key falls into the wrong hands, the worst that can happen is that someone can send from that one sender and not the entire domain.
Agathe Brusset
Hey Sunny Marmoset! Thanks a lot for sharing this — totally makes sense from a security standpoint. We’ll take a closer look at adding an option to restrict sending to a specific From address (so an exposed API key can’t be used across the whole domain) and we’ll follow up once we have an update.
Agathe Brusset
marked this post as
under review