Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

SPF +all mechanism should not be used at salva.rs #36

Open
readycool opened this issue Sep 1, 2022 · 0 comments
Open

SPF +all mechanism should not be used at salva.rs #36

readycool opened this issue Sep 1, 2022 · 0 comments

Comments

@readycool
Copy link

readycool commented Sep 1, 2022

A quick dig command dig salva.rs TXT +short outputs "v=spf1 +all".

Page 54 of RFC 7208 shows this is an all-inclusive mechanism allowing all IP addresses to pass the SPF check. In simple terms, it means malicious actors could spam on behalf of your domain name and therefore negatively affect domain reputation.

EDIT: I just noticed that you have a separate repository for the website, sorry for posting here. ☺️

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant