thunderbird / thunderbird/mailstrom
Set up SPF/DMARC to reject all email for domains we don't use for sending
Open
Nobody has claimed this yet.
- Dominant language
- Python
- Stars
- 20
- Forks
- 2
- Avg merge
- 36m
- Merged PRs (30d)
- 2
Description
We should go through the full list of our domains and make sure they have SPF reject rule, DKIM with an empty p value, and DMARC with a reject rule. See https://www.cloudflare.com/learning/dns/dns-records/protect-domains-without-email/ for more details.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Review the repository's full domain list and current infrastructure configuration; no specific files or tests are named in the issue. Check each domain that does not send mail against the SPF, DKIM, and DMARC requirements, and verify that all intended records use reject policies.
Written by the indexing model from the issue text.
Assessment
- Domain
- infrastructure, security
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 45/100