allowlist.json spares senders that are legitimate for essentially everyone.
Some obvious ones are still missing — e.g. paypal.com, shopify.com, intercom.io,
airtable.com, loom.com, miro.com, zendesk.com.
Add one (bare registrable domain) with a short note on why it's universally
legitimate, and set lastVerified to today. See CONTRIBUTING.md for the rules —
in particular, this is NOT for your own company/vendors, only universally-wanted
senders.
allowlist.jsonspares senders that are legitimate for essentially everyone.Some obvious ones are still missing — e.g. paypal.com, shopify.com, intercom.io,
airtable.com, loom.com, miro.com, zendesk.com.
Add one (bare registrable domain) with a short note on why it's universally
legitimate, and set lastVerified to today. See CONTRIBUTING.md for the rules —
in particular, this is NOT for your own company/vendors, only universally-wanted
senders.