design: server-dmarc-hint - the server's own name gets a DMARC record

Owner, 2026-10-18: "Оба предложения делаем" (the roadmap's
server-dmarc-hint, from the security audit's S3). Settings › Notification
mail gets a third record after DKIM and SPF: DMARC at _dmarc.<hostname>,
value v=DMARC1; p=reject, with a help line - without it a receiver does
not refuse mail forged in the server's name, a false password-reset
message included; only the panel sends as this name, signed, so reject is
safe. Health's Notification mail card gets the DMARC row; Help's
Notifications topic names all three records. check.py: 0 violations;
outlines.json rewritten for the third record of the Settings box
(record×2 -> record×3).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
This commit is contained in:
mix
2026-10-18 09:56:44 +03:00
co-authored by Claude Opus 5.5
parent c736a7e144
commit 8b2dc8f40f
7 changed files with 29 additions and 3 deletions
@@ -402,7 +402,7 @@
},
{
"is-6": [
"box[Notification mail]:record×2",
"box[Notification mail]:record×3",
"box[Sending rate limits]:body",
"box[Time zone]:body"
]