3 ms·
That's what the SPF record is for. Gmail and most domains would be no issue. It's random non-tech people's/small biz sites that have no measures set in place th
by popcalc 3y ago
That's what the SPF record is for. Gmail and most domains would be no issue. It's random non-tech people's/small biz sites that have no measures set in place that would have to be excluded.
- retrocryptid 3y agoSo... excluding small users or corporate accounts that engage in rewriting shenanigans is a good thing?
- popcalc 3y agoWell, it is obviously a flaw in this theoretical model. You could mitigate this to some extent by doing a dns lookup on the domain before deciding which path to take for verification. If there is no SPF record you could instead use a classic verification link in email method.