Nice catch … this should not be possible.
I edited my SOGo email settings like so:
The result after sending a mail to myself:
But what’s worse, is that I can, as is suggested above, enter ANY adres I like, including that of the CEO, and pretend I have send mail from there. If I edit my personal details to mach, there is no good way to see this was done.
This is a HUGE issue of you ask me.
This means I can in