SentinelDeck 0.3.0
Email and DNS depth, closing gaps versus internet.nl. Every new check is passive and ships a copy-paste fix.
Added
- DKIM key strength: decodes the published key and flags anything under 2048-bit RSA.
- MTA-STS policy validation: fetches the HTTPS policy file and flags a missing or invalid policy, or a non-enforce mode (not just the DNS record).
- Nameserver redundancy: flags a single nameserver as a DNS single point of failure.
- IPv6 (AAAA) readiness.
- DANE/TLSA detection, gated on DNSSEC being enabled.
Upgrade:
pip install -U sentineldeck