News for hackers. Stuff that matters.
Re:My account is sending spam emails by ryan-c on Sunday April 22, 2018 @02:26AM (#16894969)
It appears to be validating the envelope sender ([email protected]) rather than the from address, per the spec.

The thing is, telus.com doesn't have a DMARC record, and thier SPF record doesn't include 69.64.35.11. This header might be fake. Gmail does currently have a DMARC record that says p=none sp=quarantine. The 'sp' value only applies to subdomains, so the "none" (no action) policy should be used.

Edit: I just verified that gmail's dmarc has had p=none for a long time.

There are no comments on this comment yet.