<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>DMARC Analyzer blog</title><description>Original research on how the internet actually uses DMARC, engineering write-ups from building an open-source analyzer, and monthly release roundups.</description><link>https://dmarc-analyzer.net/blog/</link><language>en</language><item><title>Your rua= address is a published attack surface</title><link>https://dmarc-analyzer.net/blog/rua-address-is-attack-surface/</link><guid isPermaLink="true">https://dmarc-analyzer.net/blog/rua-address-is-attack-surface/</guid><description>My DMARC analyzer would unpack anything mailed to an address I&apos;d published in DNS. How one email could have stopped it, and the bug inside the fix.</description><pubDate>Fri, 16 Oct 2026 00:00:00 GMT</pubDate><category>engineering</category></item></channel></rss>