1456940 - people.mozilla.com No SPF Is Found In This WebSite

Status: RESOLVED WONTFIX

(Websites :: Other, defect)

Description

[Saikat]

Attachment: SPF/TXT Records: An SPF record is a type of Domain Name Service (DNS) record that identifies which mail servers are permitted to send email on behalf of your domain.

Steps To Reproduce :

There are various ways of checking Missing SPF Records on a website but the most common and popular way is http://www.kitterman.com/spf/validate.html

By Visiting This URL:
http://www.kitterman.com/spf/validate.html

You Will Not Find Any SPF on This URL " people.mozilla.com  "  You Can Check It Manually  by Visiting  http://www.kitterman.com/spf/validate.html .

Through This An Attacker Can Send Email Behalf Of  " people.mozilla.com " 
likely this
Name: " Admin "
Email: "[e-mail] "
Subject :  " We Are From People.Mozilla.com "
Subject: " Hi Dear User We Hope You Are Good!... "

An Attacker Can use Any Fake mailer to send this messages as [e-mail] or [e-mail] 
This Way An Attacker can Send Email on Behalf of People.Mozilla.com by this way  email goes  int the Inbox here i am using gmail.com it directly goes to in my gmail.com (inbox)  You can See This Proof of Concept  in my  video.


POC:
(Video is Enclosed in The Attachment)

Thanks I Hope This Will Be Fixed Soon.

Comment 1

[Saikat]

 I Think here I Cant Add Enough line only Limited Description Are Allowed here That's  Why  I Just Add multiple Comments Thought may  be i write full and Proper Description,  Any Ways Thanks!

Comment 2

[Al Billings [:abillings - ex-MoCo]]

This has been previously reported and is not a valid issue for us.