Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/foxcpp/mailsec-check
Another utility to analyze state of deployment of security-related email protocols.
https://github.com/foxcpp/mailsec-check
dane dkim dmarc email-security mta-sts spf
Last synced: about 2 months ago
JSON representation
Another utility to analyze state of deployment of security-related email protocols.
- Host: GitHub
- URL: https://github.com/foxcpp/mailsec-check
- Owner: foxcpp
- License: mit
- Created: 2019-10-26T02:56:38.000Z (almost 5 years ago)
- Default Branch: master
- Last Pushed: 2024-01-20T21:42:15.000Z (8 months ago)
- Last Synced: 2024-06-19T00:39:34.681Z (3 months ago)
- Topics: dane, dkim, dmarc, email-security, mta-sts, spf
- Language: Go
- Homepage:
- Size: 21.5 KB
- Stars: 55
- Watchers: 10
- Forks: 8
- Open Issues: 1
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
- awesome-opensource-email - mailsec-check - Another utility to analyze state of deployment of security-related email protocols. (Security / Security Check)
README
mailsec-check
===============
Another utility to analyze state of deployment of security-related email
protocols.
Compilation
--------------
Needs [Go](https://golang.org) toolchain.
```
go get github.com/foxcpp/mailsec-check
```
Usage
-------
```
mailsec-check example.org
```
Example
---------
```
$ mailsec-check protonmail.com
-- Source forgery protection
[+] DKIM: _domainkey subdomain present; DNSSEC-signed;
[+] SPF: present; strict; DNSSEC-signed;
[+] DMARC: present; strict; DNSSEC-signed;
-- TLS enforcement
[+] MTA-STS: enforced; all MXs match policy;
[+] DANE: present for all MXs; DNSSEC-signed; no validity check done;
-- DNS consistency
[+] FCrDNS: all MXs have forward-confirmed rDNS
[+] DNSSEC: A/AAAA and MX records are signed;
$ mailsec-check disroot.org
-- Source forgery protection
[+] DKIM: _domainkey subdomain present; DNSSEC-signed;
[+] SPF: present; strict; DNSSEC-signed;
[ ] DMARC: present; no-op; DNSSEC-signed;
-- TLS enforcement
[ ] MTA-STS: not enforced; all MXs match policy;
[+] DANE: present for all MXs; DNSSEC-signed; no validity check done;
-- DNS consistency
[ ] FCrDNS: no MXs with forward-confirmed rDNS
[+] DNSSEC: A/AAAA and MX records are signed;
```