News for hackers. Stuff that matters.

A comment on You can now use WebGPU in Cloudflare Workers. Parent comment

Re:You can now use WebGPU in Cloudflare Workers by drunkendog on Wednesday September 27, 2023 @10:48AM (#37675440)
I believe the secure email issue linked is exploitable by any MailChannels customer, not just Cloudflare Workers.
[ Parent | on HN ]
Re:You can now use WebGPU in Cloudflare Workers by ttul on Thursday September 28, 2023 @07:53PM (#37697558)
All Workers API calls to MailChannels must send email from a domain that has a Domain Lockdown record authorizing the Worker by its CF-Worker header. Docs are here: https://support.mailchannels.com/hc/en-us/articles/456589835...

Since you cannot forge the CF-Worker header in API requests (this header is added by Cloudflare's back end), it is not possible to send email for any domain that hasn't been locked down to your specific Worker.

[ Parent | on HN ]