How much of the email does the Mailshell SDK require? Can it handle headers separately or the text body separately?
Currently, the Mailshell SDK works best with the full RFC822 message (headers and body together) and optionally the SMTP envelope (e.g. MAIL FROM:). However, it will process whatever it is given to derive a score. For training, it is important that any changes to the trained spam also occur on the trained legit messages. LiveFeed can operate independently with just a list of IPs and/or Domains.
