-
mail-security-auditor v1.2.1
Stablereleased this
2026-10-19 05:37:54 -07:00 | 3 commits to main since this release- HTML report: a clean domain's "None found" line is shown in green, no longer in red like a finding.
Install
pipx install git+https://git.canutethegreat.com/CanuteTheGreat/mail-security-auditor.git@v1.2.1 # or the wheel attached to this release: pipx install https://git.canutethegreat.com/CanuteTheGreat/mail-security-auditor/releases/download/v1.2.1/mail_security_auditor-1.2.1-py3-none-any.whl # or the single file (stdlib-only Python 3): curl -fsSLO https://git.canutethegreat.com/CanuteTheGreat/mail-security-auditor/releases/download/v1.2.1/mail_audit.pySHA-256
5ecae0304907f51b7ca177a6c8b3012cc70898b392b11ed418505c47edc1c893 mail_audit.py c99590f9377505f9f05593e84019cdafa813337d2805f08b82af00236c23c573 mail_security_auditor-1.2.1-py3-none-any.whl 1a652df2f0929bc77f696d1fa759b58e97a8a4bd5d0e296fe2db0b00af66bd7c mail_security_auditor-1.2.1.tar.gzDownloads
-
Source code (ZIP)
7 downloads
-
Source code (TAR.GZ)
9 downloads
-
mail-security-auditor v1.2.0
Stablereleased this
2026-10-16 19:57:42 -07:00 | 18 commits to main since this release- SPF 10-DNS-lookup limit (RFC 7208 4.6.4): every include/a/mx/ptr/exists/redirect is counted across the
whole include tree; over 10 is HIGH (receivers return permerror), 9-10 is LOW. Also void lookups (> 2),
includes/redirects without an SPF record, include loops, mx terms with > 10 hosts, ptr and macros. The
JSON carries the lookup count and the include tree. - MTA-STS: TXT record, the HTTPS policy (version, mode, max_age, certificate verified) and MX coverage.
- TLS-RPT and BIMI (enforcing DMARC, https SVG logo that loads, VMC note).
- DMARC:
sp=,adkim/aspfvalues, and rua/ruf addresses in other domains must be authorized via
<domain>._report._dmarc.<other>(RFC 7489 7.1). - DKIM RSA key size (< 1024 HIGH, < 2048 LOW) and revoked keys.
--smtp: STARTTLS, certificate validity and TLS version on each MX.- Exit code now gates on severity (
--fail-on, defaultmedium) instead of "3 or more issues":
p=nonewith no rua used to exit 0. Every finding has a severity in the JSON and text report. - Installable as a package:
pipx install git+https://git.canutethegreat.com/CanuteTheGreat/mail-security-auditor.git
puts amail-security-auditorcommand on PATH (pyproject.toml, MIT license metadata). --versionflag.- Exit codes follow the shared convention: 0 = clean, 1 = findings at/above the gate, 2 = error or bad usage.
- Every tag now publishes a Forgejo release with this changelog, the wheel, the sdist and SHA256SUMS.
- CI installs the package with pip in a clean venv and checks
--version/--helpon every push.
Install
pipx install git+https://git.canutethegreat.com/CanuteTheGreat/mail-security-auditor.git@v1.2.0 # or the wheel attached to this release: pipx install https://git.canutethegreat.com/CanuteTheGreat/mail-security-auditor/releases/download/v1.2.0/mail_security_auditor-1.2.0-py3-none-any.whl # or the single file (stdlib-only Python 3): curl -fsSLO https://git.canutethegreat.com/CanuteTheGreat/mail-security-auditor/releases/download/v1.2.0/mail_audit.pySHA-256
db918be9a5613699297439bab1fb44ac3a4d550809e44f9daa73acbea15fff50 mail_audit.py 3cbf54fc80d756da87534bae7598f35f6f1f41368e3dbe41f1834142e9563e4b mail_security_auditor-1.2.0-py3-none-any.whl 88842e2a2cca4ecd7038d2c5f645c88b135a3c54879160f28442ef0452e5d605 mail_security_auditor-1.2.0.tar.gzDownloads
-
Source code (ZIP)
8 downloads
-
Source code (TAR.GZ)
10 downloads
- SPF 10-DNS-lookup limit (RFC 7208 4.6.4): every include/a/mx/ptr/exists/redirect is counted across the