GoDaddy's email and Microsoft 365 customers are vulnerable to spoofing

Anyone with a GoDaddy server can create spoofed emails that pass SPF and DMARC, thanks to unauthenticated relays combined with lax documentation and an overly-broad SPF record