News for hackers. Stuff that matters.

A comment on Mailgun doesn't validate the email headers of email sent through their system. Parent comment

Re:Mailgun doesn't validate the email headers of email sent ... by cdot2 on Saturday November 13, 2021 @12:12PM (#29211360)
Mailjet stops this by simply requiring domains to be registered to accounts before an account can send from that domain. Registering a domain requires adding a DNS record or file on that domain with a random unique guid
[ Parent | on HN ]
Re:Mailgun doesn't validate the email headers of email sent ... by kxrm on Saturday November 13, 2021 @12:43PM (#29211609)
Yep, and Mailgun requires a domain as well, they just don't do anything with it for filtering this behavior.
[ Parent | on HN ]