Re: Mailing domain is vulnerable and email can be spoofable due Vulnerable DMARC Record

2022-04-07 Thread Илья Шипицин
I wouldf also suggest BIMI record ( https://mailchimp.com/marketing-glossary/bimi/ ) to have recognizable logo in major email systems. (maybe for "haproxy.com" as well ) Ilya чт, 7 апр. 2022 г. в 17:11, Willy Tarreau : > Hello, > > On Sat, Apr 02, 2022 at 03:46:58AM +0500, Arslan Kabeer wrote:

Re: Mailing domain is vulnerable and email can be spoofable due Vulnerable DMARC Record

2022-04-07 Thread Willy Tarreau
Hello, On Sat, Apr 02, 2022 at 03:46:58AM +0500, Arslan Kabeer wrote: > Hello Team, > I am a security researcher and I founded this vulnerability. > I just sent a forged email to my email address that appears to originate > from haproxy@formilux.org > I was able to do this because of the