Skip to content

SentinelDeck 0.3.0

Choose a tag to compare

@sanmaxdev sanmaxdev released this 25 Jun 17:18
· 28 commits to main since this release

Email and DNS depth, closing gaps versus internet.nl. Every new check is passive and ships a copy-paste fix.

Added

  • DKIM key strength: decodes the published key and flags anything under 2048-bit RSA.
  • MTA-STS policy validation: fetches the HTTPS policy file and flags a missing or invalid policy, or a non-enforce mode (not just the DNS record).
  • Nameserver redundancy: flags a single nameserver as a DNS single point of failure.
  • IPv6 (AAAA) readiness.
  • DANE/TLSA detection, gated on DNSSEC being enabled.

Upgrade:

pip install -U sentineldeck