[imp] The downsides of not showing e-mail address on mouseover

[adrianwade at ursatech.com]

Hi:

Our ISP (JustHost) recently upgraded to Horde Groupware 5.1.1.  It's a
nice clean interface, but there's one big security decrease over the
previous version.  In the previous version, when one does a mouseover on
the From field of an e-mail (e.g. in the InBox) the sender's e-mail address
was displayed.  This no longer happens. Showing that e-mail address is/was
very important for two reasons...

1. If you can see the e-mail address it's obvious when a phisher claiming
to be (e.g.) "Air Canada", but really being (e.g.)
nastydude at takeyourcreditcard.info is not a legitimate e-mail, and it can be
deleted without previewing or opening.

2. When some even nastier phishers spoof the e-mail address part of the
sender field to be my address (or another address from my company), and I
know from the message title that it's not legitimate, I don't want to BLOCK
my own address (or worse, delete my own e-mails) by accident.

Please can you either:

A.  Put back the display of e-mail address on mouseover

or

B. Add another (optional) to the Inbox and other mail folders that shows
the e-mail address.

I note that Microsoft Outlook has the same problem.

Thank-you.