parsedmarc

amorfo77/parsedmarc

0 Fork 0

mirror of https://github.com/domainaware/parsedmarc.git synced 2026-11-06 16:59:23 +00:00

Files

T

History

Sean WhalenandClaude Opus 5.5 33ca4ecf71 Merge commit from fork

With [smtp] ssl = False (the default) or [imap] ssl = False, mailsuite
upgraded the connection only if the server's plain-text EHLO/CAPABILITY
reply advertised STARTTLS, and otherwise authenticated in plain text. An
on-path attacker who stripped STARTTLS received the credentials and the
emailed results (CWE-319).

- Require mailsuite >= 2.3.4 (GHSA-2x4j-7g3q-wr6f), whose default
  refuses to authenticate over a connection that was not upgraded.
- Add [imap] and [smtp] starttls (unset = require STARTTLS; false =
  explicit plain-text opt-out, for loopback servers such as DavMail),
  with a startup warning when the opt-out is set and ssl is False.
- Add a starttls argument to email_results().
- Document both options; set starttls = False in the DavMail example.

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-31 20:36:09 -04:00

__init__.py

Split tests.py into per-module tests/test_<module>.py (#774 )

2026-05-20 19:29:09 -04:00

test_cli.py

Merge commit from fork

2026-10-31 20:36:09 -04:00

test_config.py

Centralize configuration handling with ParserConfig (#503 ) (#851 )

2026-07-25 19:27:09 -04:00

test_elastic.py

Add opt-in Elasticsearch/OpenSearch data streams (#937 )