CanuteTheGreat/mail-security-auditor
Watch
1
0
Fork
You've already forked mail-security-auditor
 0
Code Issues Pull requests Projects Releases 2 Packages Wiki Activity Actions
2 releases 4 tags
  • v1.2.0 63e2101b94

    mail-security-auditor v1.2.0
    All checks were successful
    tests / test (3.13) (push) Successful in 54s
    Details
    tests / test (3.7) (push) Successful in 1m18s
    Details
    release / release (push) Successful in 18s
    Details
    Stable

    Ghost released this 2026-10-16 19:57:42 -07:00 | 18 commits to main since this release

    • SPF 10-DNS-lookup limit (RFC 7208 4.6.4): every include/a/mx/ptr/exists/redirect is counted across the
      whole include tree; over 10 is HIGH (receivers return permerror), 9-10 is LOW. Also void lookups (> 2),
      includes/redirects without an SPF record, include loops, mx terms with > 10 hosts, ptr and macros. The
      JSON carries the lookup count and the include tree.
    • MTA-STS: TXT record, the HTTPS policy (version, mode, max_age, certificate verified) and MX coverage.
    • TLS-RPT and BIMI (enforcing DMARC, https SVG logo that loads, VMC note).
    • DMARC: sp=, adkim/aspf values, and rua/ruf addresses in other domains must be authorized via
      <domain>._report._dmarc.<other> (RFC 7489 7.1).
    • DKIM RSA key size (< 1024 HIGH, < 2048 LOW) and revoked keys.
    • --smtp: STARTTLS, certificate validity and TLS version on each MX.
    • Exit code now gates on severity (--fail-on, default medium) instead of "3 or more issues":
      p=none with no rua used to exit 0. Every finding has a severity in the JSON and text report.
    • Installable as a package: pipx install git+https://git.canutethegreat.com/CanuteTheGreat/mail-security-auditor.git
      puts a mail-security-auditor command on PATH (pyproject.toml, MIT license metadata).
    • --version flag.
    • Exit codes follow the shared convention: 0 = clean, 1 = findings at/above the gate, 2 = error or bad usage.
    • Every tag now publishes a Forgejo release with this changelog, the wheel, the sdist and SHA256SUMS.
    • CI installs the package with pip in a clean venv and checks --version/--help on every push.

    Install

    pipx install git+https://git.canutethegreat.com/CanuteTheGreat/mail-security-auditor.git@v1.2.0
# or the wheel attached to this release:
pipx install https://git.canutethegreat.com/CanuteTheGreat/mail-security-auditor/releases/download/v1.2.0/mail_security_auditor-1.2.0-py3-none-any.whl
# or the single file (stdlib-only Python 3):
curl -fsSLO https://git.canutethegreat.com/CanuteTheGreat/mail-security-auditor/releases/download/v1.2.0/mail_audit.py

    SHA-256

    db918be9a5613699297439bab1fb44ac3a4d550809e44f9daa73acbea15fff50  mail_audit.py
3cbf54fc80d756da87534bae7598f35f6f1f41368e3dbe41f1834142e9563e4b  mail_security_auditor-1.2.0-py3-none-any.whl
88842e2a2cca4ecd7038d2c5f645c88b135a3c54879160f28442ef0452e5d605  mail_security_auditor-1.2.0.tar.gz
    Downloads