SPF is not actually checked against
immjs opened this issue · 0 comments
immjs commented
Trying to find a good enough spf library. When reading your code for clues, I noticed that the code for validateSpf only checks if the domain's spf records are valid, not if the ip matches the spf selector.
You could use a library such as spf-validate-dns to check if the IP matches. (I can't because it doesn't have types)