Hacker News new | ask | show | jobs
by akshayKMR 844 days ago
Hey, this comes at a perfect time for me.

I had posted my app on Betalist about a week ago and received a vulnerability report about incorrectly configured DMARC from a security researcher. I made the fix but wasn't confident about it. Shortly after, I received a couple more similar emails.

With this tool, my first check failed, citing an invalid SPF record. (I had an extra `.` at the end of my TXT record). Now, the check shows all passing.

I hope all is good now (emails are wild).

From my limited understanding:

    SPF <- Should this server be sending emails for this domain?
    DKIM <- Was this email tampered with?
    DMARC <- What should I, as a recipient, do if SPF or DKIM fails?
Thanks!
2 comments

I'm really happy to read that the app was able to help! Thanks for sharing.
DMARC itself contains some extra checks (alignment check).