Security: say what the relaying checks actually mean #111

Merged

jcoffey-dev merged 1 commits from security/relay-wording into main

2026-10-14 18:39:20 +00:00

Author	SHA1	Message	Date
jcoffey-dev	fe84883812	Security: say what the relaying checks actually mean ci / build (pull_request) Skipped Details ci / publish (pull_request) Skipped Details ci / notices (pull_request) Successful in 44s Details github/ci (branch) GitHub Actions Details ci / github (pull_request) Successful in 1m44s Details SS-3 said a domain with relaying on 'relays mail for anyone' and that mail 'claiming to be from' it is passed on without sign-in. The flag does neither: it makes the server accept mail to unknown addresses at that domain, to pass on, instead of refusing them. Its title and why now say that, and what goes wrong when it's on by mistake (late bounces, often to forged senders). SS-2 keeps its open-relay warning and adds the deliberate case, an edge server in front of another one, and what to check before accepting it. Severities are unchanged.	2026-10-14 11:37:08 -07:00

Author

SHA1

Message

Date

jcoffey-dev

fe84883812

Security: say what the relaying checks actually mean

ci / build (pull_request) Skipped

Details

ci / publish (pull_request) Skipped

Details

ci / notices (pull_request) Successful in 44s

Details

github/ci (branch) GitHub Actions

Details

ci / github (pull_request) Successful in 1m44s

Details

SS-3 said a domain with relaying on 'relays mail for anyone' and that mail
'claiming to be from' it is passed on without sign-in. The flag does
neither: it makes the server accept mail to unknown addresses at that
domain, to pass on, instead of refusing them. Its title and why now say
that, and what goes wrong when it's on by mistake (late bounces, often to
forged senders). SS-2 keeps its open-relay warning and adds the deliberate
case, an edge server in front of another one, and what to check before
accepting it. Severities are unchanged.

2026-10-14 11:37:08 -07:00