SPF +all mechanism should not be used at salva.rs
Open
- Dominant language
- Rust
- Stars
- 693
- Forks
- 40
- PR merge metrics
- No merged PRs in 30d
Description
A quick dig command `dig salva.rs TXT +short` outputs `"v=spf1 +all"`.
Page 54 of [RFC 7208](https://datatracker.ietf.org/doc/rfc7208/) shows this is an all-inclusive mechanism allowing all IP addresses to pass the SPF check. In simple terms, it means malicious actors could spam on behalf of your domain name and therefore [negatively affect domain reputation](https://knowledge.ondmarc.redsift.com/en/articles/1238318-what-is-the-all-mechanism-in-spf-and-should-i-use-it).
EDIT: I just noticed that you have a separate repository for the website, sorry for posting here. ☺️
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.