diff --git a/web/src/lib/components/HeaderAnalysisCard.svelte b/web/src/lib/components/HeaderAnalysisCard.svelte index 3cfe287..e0ecb58 100644 --- a/web/src/lib/components/HeaderAnalysisCard.svelte +++ b/web/src/lib/components/HeaderAnalysisCard.svelte @@ -58,6 +58,8 @@ {/if} {#if headerAnalysis.domain_alignment} + {@const spfStrictAligned = headerAnalysis.domain_alignment.from_domain === headerAnalysis.domain_alignment.return_path_domain} + {@const spfRelaxedAligned = headerAnalysis.domain_alignment.from_org_domain === headerAnalysis.domain_alignment.return_path_org_domain}
Domain alignment ensures that the visible "From" domain matches the domain used for authentication (Return-Path or DKIM signature). Proper alignment is crucial for DMARC compliance, regardless of the policy. It helps prevent email spoofing by verifying that the sender domain is consistent across all authentication layers. Only one of the following lines needs to pass.
+ {#if headerAnalysis.domain_alignment.issues && headerAnalysis.domain_alignment.issues.length > 0} +{headerAnalysis.domain_alignment.from_domain || '-'}{headerAnalysis.domain_alignment.from_org_domain}{headerAnalysis.domain_alignment.return_path_domain || '-'}{headerAnalysis.domain_alignment.return_path_org_domain}{headerAnalysis.domain_alignment.from_domain || '-'}{headerAnalysis.domain_alignment.from_org_domain}{headerAnalysis.domain_alignment.return_path_domain || '-'}{headerAnalysis.domain_alignment.return_path_org_domain}{headerAnalysis.domain_alignment.from_domain || '-'}{headerAnalysis.domain_alignment.from_org_domain}{dkim_domain.domain || '-'}{dkim_domain.org_domain}{headerAnalysis.domain_alignment.from_domain || '-'}{headerAnalysis.domain_alignment.from_org_domain}{dkim_domain.domain || '-'}{dkim_domain.org_domain}