This repository holds guides, a static HTML page, an example filter file and a small Python builder. It runs no service. In scope:

• The signature builder sending anything typed into it anywhere. It is meant to run entirely in the browser
• outlook/build_oft.py reading or writing anything outside the repository
• Guidance that would weaken mail security if followed, for example a DNS record that is wrong

• Behaviour of Gmail, Outlook or Google Workspace themselves
• Vulnerabilities in msgforge, which belong with that project