News for hackers. Stuff that matters.
Re:DMARC required by Gmail and Yahoo from Feb 2024 by freddieleeman on Wednesday January 10, 2024 @02:36AM (#38937310)
For those interested in testing their email for SPF, DKIM, and DMARC compliance or eager to learn about these mechanisms that enhance email security and prevent spoofing, check out https://learnDMARC.com. This is a site I developed to promote adoption and share knowledge. It includes a challenging quiz, tough even for professionals. I'd be keen to know your scores on the first attempt – honesty counts!
Re:DMARC required by Gmail and Yahoo from Feb 2024 by ksjskskskkk on Wednesday January 10, 2024 @02:42AM (#38937362)
harder part is knowing the hacks from your dns provider that prevents things from working right.

I've spent two weeks on a domain with limited registrar options because their dns manager lied about supporting larger public keys in txt records.

Re:DMARC required by Gmail and Yahoo from Feb 2024 by w3ll_w3ll_w3ll on Wednesday January 10, 2024 @08:16AM (#38939096)
Amazing site!
Re:DMARC required by Gmail and Yahoo from Feb 2024 by Kirce on Wednesday January 10, 2024 @09:22AM (#38939268)
If I scroll the DMARC Results on mobile Firefox, the right column doesn't scroll, while the rest of the table does. The results where all green, as expected :)
Re:DMARC required by Gmail and Yahoo from Feb 2024 by flumpcakes on Wednesday January 10, 2024 @10:56AM (#38939964)
This is great! I scored 60% because I didn't realise 5321 HELO was also checked. That's news to me, I've never seen that before. I got 90% on my 2nd attempt :)

Also I think there was one question that was a mistake, it had a policy along the lines of:

v=DMARC1; p=reject; <stuff...>; pct=0; <stuff...>

I answered that a failing message would have an effect of p=none, but the right answer was apparently p=quarantine. Is that right, considering pct=0? (Unless I was blind and the pct wasn't set to 0 in the question...)

Re:DMARC required by Gmail and Yahoo from Feb 2024 by freddieleeman on Monday January 15, 2024 @03:53AM (#38998697)
https://datatracker.ietf.org/doc/html/rfc7489#section-6.6.4

"If email is subject to the DMARC policy of "reject", the Mail Receiver SHOULD reject the message (see Section 10.3). If the email is not subject to the "reject" policy (due to the "pct" tag), the Mail Receiver SHOULD treat the email as though the "quarantine" policy applies. This behavior allows Domain Owners to experiment with progressively stronger policies without relaxing existing policy."

Re:DMARC required by Gmail and Yahoo from Feb 2024 by superhumanuser on Wednesday January 10, 2024 @11:38AM (#38940442)
This is beautiful and fun to use!

Thank you thank you.

Re:DMARC required by Gmail and Yahoo from Feb 2024 by binkHN on Wednesday January 10, 2024 @11:39AM (#38940445)
Super slick site!