Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Investigate verifying email identities in addition to domain identities #3124

Open
1 task
Tracked by #2512
jameshochadel opened this issue Sep 5, 2024 · 1 comment
Open
1 task
Tracked by #2512

Comments

@jameshochadel
Copy link
Contributor

jameshochadel commented Sep 5, 2024

Domain verification, the only way to send mail with the brokerpak currently, allows users to send from any email at a given domain. Some customers' agencies may not want to allow such broad sending permissions, which open the door to spoofing emails and abuse.

SES supports verifying a single email instead of an entire domain: https://docs.aws.amazon.com/ses/latest/dg/creating-identities.html#verify-email-addresses-procedure

Investigate adding this as a feature, possibly as a different plan.

  • Are DNS records still required? Probably.
@jameshochadel
Copy link
Contributor Author

Note: This might make sense as a post-launch feature.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant