In this case, using Amazon SES is out of the question: an authorization procedure is required before sending as a specific email address.
Even if you requested them for information about the SMTP server, this will lead to sending huge red flags to any competent users. Most SMTP servers are configured to either require authentication during the SMTP transaction, or require a recent POP3 or IMAP connection, which means collecting user credentials. Do you want your users to trust you with their email password?
All in all, this is actually an incredibly bad idea, especially considering email authentication methods such as SPF / Sender ID . Mail messages sent this way through unauthorized servers are increasingly becoming (by right) marked as spam.
Will your use case let emails “off” your application, but have a “response to” the user?
Charles
source share