Show HN: I wrote an email app that accepts only one sender per inbox

Re:Show HN: I wrote an email app that accepts only one sende... by CreepyHunterX on Thursday October 15, 2026 @09:20AM (#50103275)

Does your application check DMARC alignment? Otherwise, a spoofed 'from' address will pass through. And also the sender's policy alone is not enough because, gmail.com and outlook.com have DMARC p=none.

[ Parent | on HN ]

Re:Show HN: I wrote an email app that accepts only one sende... by edpin2000 on Thursday October 15, 2026 @09:57AM (#50103777)

Yes it does. DMARC/SPF/DKIM and spam checking.

[ Parent | on HN ]

Re:Show HN: I wrote an email app that accepts only one sende... by chief1 on Wednesday October 28, 2026 @05:42PM (#50281343)

When I checked the DMARC for clovamail.com using https://mail-tester.com, it shows this message.

Your domains are not aligned. We can't check DMARC. Before using DMARC, you should make sure the domains used in the Envelope From (e.g., Return-Path or Mail-From), the "Friendly" From (i.e., "Header" From) and the d=domain in the DKIM-Signature are the same

[ Parent | on HN ]