Email spoofing consists in send email as others. You can authenticate as username@domain.com and send email as boss@domain.com by default on cPanel servers due to Exim's configuration and this is not needed in some environments. (mais...)