# Email security concepts

## Sending provider

A sending provider is the third-party service, server, platform, or infrastructure entity authorized (or attempting) to send mail on behalf of a domain.

Also known as: Sender, Source, Sending source

## Receiving provider

A receiving provider is the email platform or infrastructure organization that accepts mail sent on behalf of a domain and generates [DMARC reports](https://dmarced.eu/en/learn/basics/dmarc/xml-report).

Also known as: Receivers, Reporters, Reporting organizations, Report generator

## Header from

Header from is the visible email address displayed to the end-user in their email client (like Outlook, Thunderbird). It indicates who the message claims to be from. It is the primary mail address evaluated by [DMARC](https://dmarced.eu/en/learn/basics/dmarc/overview).

Also known as: Friendly from, RFC5322.From

## Envelope from

Envelope from is the technical sender email address used during transport and routing (similar to the sender on a physical mail envelope). Delivery issues, bounces, or out-of-office notifications are sent back to it. It is evaluated in [SPF](https://dmarced.eu/en/learn/basics/spf).

Also known as: Return path, Bounce address, Mail from, RFC5321.MailFrom

## Envelope to

Envelope to is the technical destination address used by mail servers to route and deliver the message. It can differ from visible To, Cc, or Bcc recipients.

Also known as: Final recipient, RCPT TO, RFC5321.RcptTo