HN Explorer

throwaway2346mg

↗ HN profile [ 135 ms ] full profile
Karma
35
Created
July 10, 2023 (3y ago)
Submissions
0
  1. Mailgun: Public Security Disclosure

    TLDR: Inbound email routes don't have SPF/DKIM/DMARC protection, meaning any inbound email sent to a webhook can be trivially spoofed / phished. Mailgun describe inbound routes as: "complex incoming messages are…

    88 points 30
  2. Mailgun: Public Security Disclosure

    TLDR: Inbound email routes don't have SPF/DKIM/DMARC protection, meaning any inbound email sent to a webhook can be trivially spoofed / phished. Mailgun describe inbound routes as: "complex incoming messages are…

    5 points 2