Envelope-From
Envelope-From identifies the SMTP sender for transport and error feedback. It must be distinguished from the visible sender address.
Envelope-From identifies the sender in an email’s transport envelope. It is passed using the SMTP command MAIL FROM. This reverse path serves especially as the destination for error reports; it is not equivalent to the visible sender line.
Plan the technical return route
In the fictional design, a portal sends message E-662 through an external service. The service uses a technical mailbox for bounces while the visible From field contains the portal address. The SMTP sender and visible sender can serve different purposes.
For this design, the team documents who processes the feedback and how it is linked to the right message. Changing only the visible address does not set up this return route. The transport address likewise does not replace verified user access in the portal.
Handle empty reverse paths correctly
Certain technical notifications deliberately use an empty reverse path to prevent error loops. It should therefore not be indiscriminately overwritten with a company address. Check the behaviour in the intended sending service. For business processing, what matters is which feedback returns to the application and who handles it.
Sources
Related terms
- Return-PathReturn-Path records the SMTP reverse path in a header. It explains the technical route for error reports, not a person’s identity.
- Sender Policy FrameworkSPF checks a sending server’s authorisation to use an SMTP domain. The visible sender line and receipt are separate questions.
- SPF alignmentSPF alignment links the successfully checked SMTP sender domain to the visible sender domain. The DMARC mode determines the required comparison.
- DMARC aggregate reportA DMARC aggregate report summarises a reporting mail system’s domain checks over a period. It helps examine sending sources and misconfigurations.
- DMARC policyA DMARC policy describes the requested handling of failed domain checks. It repairs neither sending sources nor their alignment.
- DKIM selectorThe DKIM selector and signing domain point to the public verification key. It helps map keys to specific sending routes.
Articles on this topic








Cloud & Operations with ASES
Hosting, deployment, maintenance and support

