Hacker News Reader

kcolemangton How to prevent email spoofing, using an unholy combination of silly standards

It works by inactivating spf terms that cause errors then serving out a cleaned up and compressed policy for you on the fly.

kcolemangton How to prevent email spoofing, using an unholy combination of silly standards

https://fraudmarc.com/spf-record-check/

If your spf is too heavy, add universal spf and then watch it work by either sending a test message or rechecking your spf with https://vamsoft.com/support/tools/spf-policy-tester

kcolemangton How to prevent email spoofing, using an unholy combination of silly standards

Not to overly shill my own free solution here but quite a few people use Universal SPF (a little string you put in front of a traditional spf record) to overcomes the 10 dns lookup limit.

kcolemangton How to prevent email spoofing, using an unholy combination of silly standards

> they've got too many includes in their SPF records, so SPF always fails.

Any domain can toss "v=spf1 include:UniversalSPF.org -include:x.UniversalSPF.org" in front of their broken SPF record to automagically clean and fix it. This authorizes mail that the domain owner expects to pass, and fails the mail they expect to fail.

Source: One of my startup's covid projects was creating and giving away https://UniversalSPF.org. We'd already been providing SPF Compression commercially since c. 2015.

It's free to use and already trusted by several hundred businesses.

Here's a good spf evaluator in case you want to see universal spf fix your domain's policy: https://vamsoft.com/support/tools/spf-policy-tester and a more technical deep dive for you other command line geeks: https://fraudmarc.com/introducing-universal-spf/

kcolemangton Show HN: 4yr post Techstars + studying 8.3 mil reports + amazing clients = ???

Hi HN,

Thought some of you might enjoy a candid peek behind the curtain of our humble startup. How do we dodge death and create layer 2 email protocols?

I'll hang around for a few hoping you other founders have suggestions or want to geek out on email protocols.

kcolemangton Techstars startup: Open-source and serverless DMARC report analysis system

I'll bid on the Juno account when I find a 3.5" drive for the install disk. Would you consider throwing in a few hours of AOL access time?

kcolemangton Techstars startup: Open-source and serverless DMARC report analysis system

Thanks for the kind words and we're happy to help. Lmk when we can AI-test the PWA on MoQuality.com.