• v1.2.1 fe21aaca2c

    mail-security-auditor v1.2.1
    All checks were successful
    tests / test (3.7) (push) Successful in 1m3s
    tests / test (3.14) (push) Successful in 1m7s
    release / release (push) Successful in 37s
    Stable

    Ghost released this 2026-10-19 05:37:54 -07:00 | 3 commits to main since this release

    • HTML report: a clean domain's "None found" line is shown in green, no longer in red like a finding.

    Install

    pipx install git+https://git.canutethegreat.com/CanuteTheGreat/mail-security-auditor.git@v1.2.1
    # or the wheel attached to this release:
    pipx install https://git.canutethegreat.com/CanuteTheGreat/mail-security-auditor/releases/download/v1.2.1/mail_security_auditor-1.2.1-py3-none-any.whl
    # or the single file (stdlib-only Python 3):
    curl -fsSLO https://git.canutethegreat.com/CanuteTheGreat/mail-security-auditor/releases/download/v1.2.1/mail_audit.py
    

    SHA-256

    5ecae0304907f51b7ca177a6c8b3012cc70898b392b11ed418505c47edc1c893  mail_audit.py
    c99590f9377505f9f05593e84019cdafa813337d2805f08b82af00236c23c573  mail_security_auditor-1.2.1-py3-none-any.whl
    1a652df2f0929bc77f696d1fa759b58e97a8a4bd5d0e296fe2db0b00af66bd7c  mail_security_auditor-1.2.1.tar.gz
    
    Downloads
  • v1.2.0 63e2101b94

    mail-security-auditor v1.2.0
    All checks were successful
    tests / test (3.13) (push) Successful in 54s
    tests / test (3.7) (push) Successful in 1m18s
    release / release (push) Successful in 18s
    Stable

    Ghost released this 2026-10-16 19:57:42 -07:00 | 18 commits to main since this release

    • SPF 10-DNS-lookup limit (RFC 7208 4.6.4): every include/a/mx/ptr/exists/redirect is counted across the
      whole include tree; over 10 is HIGH (receivers return permerror), 9-10 is LOW. Also void lookups (> 2),
      includes/redirects without an SPF record, include loops, mx terms with > 10 hosts, ptr and macros. The
      JSON carries the lookup count and the include tree.
    • MTA-STS: TXT record, the HTTPS policy (version, mode, max_age, certificate verified) and MX coverage.
    • TLS-RPT and BIMI (enforcing DMARC, https SVG logo that loads, VMC note).
    • DMARC: sp=, adkim/aspf values, and rua/ruf addresses in other domains must be authorized via
      <domain>._report._dmarc.<other> (RFC 7489 7.1).
    • DKIM RSA key size (< 1024 HIGH, < 2048 LOW) and revoked keys.
    • --smtp: STARTTLS, certificate validity and TLS version on each MX.
    • Exit code now gates on severity (--fail-on, default medium) instead of "3 or more issues":
      p=none with no rua used to exit 0. Every finding has a severity in the JSON and text report.
    • Installable as a package: pipx install git+https://git.canutethegreat.com/CanuteTheGreat/mail-security-auditor.git
      puts a mail-security-auditor command on PATH (pyproject.toml, MIT license metadata).
    • --version flag.
    • Exit codes follow the shared convention: 0 = clean, 1 = findings at/above the gate, 2 = error or bad usage.
    • Every tag now publishes a Forgejo release with this changelog, the wheel, the sdist and SHA256SUMS.
    • CI installs the package with pip in a clean venv and checks --version/--help on every push.

    Install

    pipx install git+https://git.canutethegreat.com/CanuteTheGreat/mail-security-auditor.git@v1.2.0
    # or the wheel attached to this release:
    pipx install https://git.canutethegreat.com/CanuteTheGreat/mail-security-auditor/releases/download/v1.2.0/mail_security_auditor-1.2.0-py3-none-any.whl
    # or the single file (stdlib-only Python 3):
    curl -fsSLO https://git.canutethegreat.com/CanuteTheGreat/mail-security-auditor/releases/download/v1.2.0/mail_audit.py
    

    SHA-256

    db918be9a5613699297439bab1fb44ac3a4d550809e44f9daa73acbea15fff50  mail_audit.py
    3cbf54fc80d756da87534bae7598f35f6f1f41368e3dbe41f1834142e9563e4b  mail_security_auditor-1.2.0-py3-none-any.whl
    88842e2a2cca4ecd7038d2c5f645c88b135a3c54879160f28442ef0452e5d605  mail_security_auditor-1.2.0.tar.gz
    
    Downloads