Closed Bug 1690599 Opened 4 years ago Closed 4 years ago

DMARC Policy Not Enabled

Categories

(Websites :: Other, task)

Product:
Websites
Component:
Other
Type:
task

Tracking

(Not tracked)

Status:
RESOLVED DUPLICATE of bug 1339102

People

(Reporter: aptsiaurivazha, Unassigned)

References

(
URL
)

Details

(Keywords: reporter-external, Whiteboard: [reporter-external] [web-bounty-form] [verif?])

Hello, i checked DMARC records of mozilla.org and "DMARC Policy Not Enabled"
so, it's easy for attacker to send email from name "support" or any name and Email: "support@mozilla.org" so, he can take over user account lets say victim knows the phishing attacks, but when he sees the email from the authorized domain. He gets tricked easily.

you can test it here: https://emkei.cz/

Flags: sec-bounty?
Status: UNCONFIRMED → RESOLVED
Closed: 4 years ago
Resolution: --- → DUPLICATE
Flags: sec-bounty? → sec-bounty-
Group: websites-security
Duplicate of bug: dmarc-everything
No longer duplicate of bug: 1632799
You need to log in before you can comment on or make changes to this bug.