// archive
// TL;DR This isn’t the usual email-spoofing bug — it has nothing to do with SPF, DKIM, or DMARC. Instead of forging a target’s domain, I…