How to Prove Email Spoofing Properly