Important reminder, if you own a domain name and don't use it for sending email. There is nothing to stop scammers from sending email claiming to be coming from your domain. And the older it gets, the more valuable it is for spoofing. It could eventually damage your domain's reputation and […] - ThreadSky

About ThreadSky

Jerry.hear-me.social.ap.brid.gy • 78 days ago

Important reminder, if you own a domain name and don't use it for sending email.

There is nothing to stop scammers from sending email claiming to be coming from your domain. And the older it gets, the more valuable it is for spoofing. It could eventually damage your domain's reputation and […]

Comments

csteinbach.bsky.social•78 days ago

@fastmail.com is this something you support?

tychotithonus.infosec.exchange.ap.brid.gy•78 days ago

@Jerry No-email domains can also set a null MX:

https://www.rfc-editor.org/rfc/rfc7505.html

MX 10 "."

leoncowle.hachyderm.io.ap.brid.gy•78 days ago

@Jerry Great post, as a reminder! I work on this at work, but haven't paid the same attention to my own personal domains.

And just a slight FYI, the SPF TXT record does indeed need to be on the apex/root domain, which, yes, some DNS providers use “@“ as a placeholder for, but that's not what […]

Jerry.hear-me.social.ap.brid.gy•77 days ago

@leoncowle Thanks, Leon!

ciprian.uk•50 days ago

Also helpful to set MX to https://void.blackhole.mx and/or https://tar.junkemailfilter.com to help trap spam messages addressed to your unused domain name
https://abusix.com/blackhole-mx-anti-spam-solution/

whophd.ioc.exchange.ap.brid.gy•77 days ago

@Jerry @nopatience This is a gold nugget of a tip. Partly because it’s timeless. One of us should build a directory page full of #infosectips

whophd.ioc.exchange.ap.brid.gy•77 days ago

@Jerry @nopatience wow the replies here are amazing quality

Posting Rules

Be respectful to others
No spam or self-promotion
Stay on topic
Follow Bluesky's terms of service

Comments

Posting Rules

Reply