News for hackers. Stuff that matters.

A comment on Sending DMARC reports is somewhat hazardous. Parent comment

Re:Sending DMARC reports is somewhat hazardous by braiamp on Wednesday December 03, 2025 @07:01AM (#46133516)
Do DMARC report tools like opendmarc-reports [0] comply with that section? Which tool have you seen that complies?

[0]: https://github.com/nabbar/opendmarc-reports

[ Parent | on HN ]
Re:Sending DMARC reports is somewhat hazardous by madflo on Wednesday December 03, 2025 @11:41AM (#46136620)
To the best of my knowledge opendmarc-reports does not perform a DNS check for external auth, but I might be mistaken.

Major hosts (Google, Zoho, Yahoo, Microsoft) are checking for sure. Japanese hosts are the worst offenders. I will try to do a proper data extraction and report back.

[ Parent | on HN ]