Known issue -- never got around to fixing it. Since the dreamwidth.org emails only forward to other accounts anyway, I usually just tell people to use another email. If you really are worried about security you can create a dummy throwaway account on gmail or whatever and just set the forwarding there.

I looked into it once, it wasn't obvious, so I never finished digging into it and fixing it.