Shopify: Missing spf flags for myshopify.com

2015-04-03T22:16:30
ID H1:54779
Type hackerone
Reporter scorppy
Modified 2015-04-16T10:35:32

Description

Hello guys

I just checked for SPF records for the myshopify.com domain, and there are none, effectively allowing for spam to originate from that domain. you can validate by testing yourself here: http://www.kitterman.com/spf/validate.html

The SPF records are correctly set for shopify.com so i guess myshopify was overlooked?