←back to thread

Crooks Bypassed Google's Email Verification to Create Workspace Accounts, Acces

(krebsonsecurity.com)
193 points todsacerdoti | 2 comments | 26 Jul 24 21:34 UTC | HN request time: 1.394s | source
1. amluto ◴[27 Jul 24 00:20 UTC] No.41083542[source]▶
Maybe we need the IdP equivalent of CAA records. If I have a domain that doesn’t use a given IdP, I want everyone who might rely on that IdP to know that the IdP in question has no authority on that domain.
replies(1): >>41083588 #
2. ◴[27 Jul 24 00:26 UTC] No.41083588[source]▶