Hello,
just a quick notification. The Email configuration audit with DMARC DNS entry is somewhat misleading : a DMARC record, that does nothing (p=none), shows a configuration as OK. It still allows spoofing the domain.
Proposal :
- Issue if DMARC is absent or
p=none
- OK if DMARC has
p=quarantine or p=reject
This is properly done with SPF being ok with -all and not ok with ~all.
Thanks and thanks for this tool!
Hello,
just a quick notification. The Email configuration audit with DMARC DNS entry is somewhat misleading : a DMARC record, that does nothing (p=none), shows a configuration as OK. It still allows spoofing the domain.
Proposal :
p=nonep=quarantineorp=rejectThis is properly done with SPF being ok with
-alland not ok with~all.Thanks and thanks for this tool!