News for hackers. Stuff that matters.

A comment on TXT Record XSS. Parent comment

Re:TXT Record XSS by pkinsky on Thursday September 18, 2014 @01:26PM (#8336458)
This is hilarious, but what's up with this line? >jamiehankins.co.uk descriptive text "v=spf1 include:spf.mandrillapp.com ?all"

Why is mandrillapp.com (tranactional email startup) included?

[ Parent | on HN ]
Re:TXT Record XSS by eli on Thursday September 18, 2014 @01:40PM (#8336548)
It's an SPF record. By adding your authorized mail servers to your DNS, recipient mail servers can "verify" that a given server is supposed to sending mail for your domain.
[ Parent | on HN ]
Re:TXT Record XSS by JamieH on Thursday September 18, 2014 @01:28PM (#8336466)
It's my personal domain, I use mandrill for some stuff.
[ Parent | on HN ]
Re:TXT Record XSS by SEJeff on Thursday September 18, 2014 @01:58PM (#8336641)
Hell of a good prank dude, well played sir!
[ Parent | on HN ]
Re:TXT Record XSS by nemetroid on Thursday September 18, 2014 @02:56PM (#8336951)
That's a legitimate record, not related to the XSS.
[ Parent | on HN ]