alt Hacker News>Right now you can forge email from any email address you can verify ownership.
how can you "forge" something if you verify ownership? when you own something, it's not "forging" to use it.
i think the point you're trying to get at is that the mail might fail dmarc requirements?
Because ownership can change. I can still use Gmail to send email from my old university address that I lost access to 15+ years ago. This should not be possible.