HexBrain

Paragon Initiative Enterprises · Report #115250

Missing SPF records for paragonie.com

Duplicatestatus
1upvotes
17 Jun 2016disclosed

How it was found

Hi , I know you want researchers to focus on bugs with your open source , however , the fix for this issue is pretty simple , moreover you haven't clearly said not to report issues in your website , so reporting this to you ;) this bug can be used to spoof your emails.

#Reproduction steps: 1.Go to http://www.kitterman.com/spf/validate.html? 2.Enter paragonie.comin the text box. 3. Click Get SPF Records (if any) 4. You will got no records.

Thanks

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original