Show HN: Mailready – meet the new email deliverability standards

Re:Show HN: Mailready – meet the new email deliverability st... by mike-cardwell on Tuesday January 30, 2024 @02:00PM (#39194148)

Basic XSS - https://mailready.info/authentication?domain=grepular.com

[ Parent | on HN ]

Re:Show HN: Mailready – meet the new email deliverability st... by kehers on Tuesday January 30, 2024 @02:11PM (#39194265)

Thanks for this. Will fix.

[ Parent | on HN ]

Re:Show HN: Mailready – meet the new email deliverability st... by mike-cardwell on Tuesday January 30, 2024 @04:09PM (#39195869)

Your fix is wrong. It states the SPF record is invalid. It is not.

https://datatracker.ietf.org/doc/html/rfc7208

> Unrecognized modifiers MUST be ignored no matter where, or how often, they appear in a record. This allows implementations conforming to this document to gracefully handle records with modifiers that are defined in other specifications.

A correct SPF validator will ignore the xss modifier, not treat the SPF record as invalid.

[ Parent | on HN ]