Recent submissions

Comment · 2 years ago
GoDaddy's DMARC reports are passing SPF even when the RFC5321.MailFrom and RFC5322.From domains aren't aligned.
Comment · 2 years ago
Comment · 2 years ago
Just 0.3% of domains implemented an MTA-STS TXT record. 571 (19.5%) of these domains have implementation errors (see complete list below). Among the valid MTA-STS implementations, 54.3% publish an 'enforce' policy, while 45% have opted for a 'testing' policy. In summary, 1278 domains leverage MTA-STS to fortify their defenses against Man-in-the-Middle (MitM) downgrade attacks.
Comment · 2 years ago
https://datatracker.ietf.org/doc/html/rfc7489#section-6.6.4

"If email is subject to the DMARC policy of "reject", the Mail Receiver SHOULD reject the message (see Section 10.3). If the email is not subject to the "reject" policy (due to the "pct" tag), the Mail Receiver SHOULD treat the email as though the "quarantine" policy applies. This behavior allows Domain Owners to experiment with progressively stronger policies without relaxing existing policy."

Comment · 2 years ago
https://URIports.com/dmarc offers services starting at just $1 monthly for up to 3 domains. It's GDPR compliant and includes features like notifications, hosted MTA-STS for protection against Man-in-the-Middle (MiTM) downgrade attacks, and much more.

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton