awulf

8 ms·

1.
RFC 9989: What's New in the Latest DMARC Specification(dmarcchecker.app)
4 points by awulf 4mo ago|0 comments
2.
by awulf 1y ago
I built a free DMARC/DKIM/SPF checker: https://dmarcchecker.app/ . No usage limits, no ads—just a small footer link to one of my other projects. Made it for the exact reason you mentioned.
3.
DNSSEC and Why It Matters for Email Security(dmarcchecker.app)
2 points by awulf 2y ago|0 comments
4.
by awulf 2y ago
An easy way is to check the length of the p= value in the DKIM record. If it's around 216 characters, it's likely a 1024-bit key. A 2048-bit key usually has about 388 characters.
5.
by awulf 2y ago
The DKIM verification failed with the result "dkim=policy (weak key)," as it should according to RFC 8301: "Verifiers MUST NOT consider signatures using RSA keys of less than 1024 bits as valid signatures."
6.
by awulf 2y ago
I guess most of these keys are decades old and no longer in use. They're likely just sitting in the DNS because someone forgot to delete them. Now, no one's sure if they're still needed and is afraid to remove them in case it
7.
by awulf 2y ago
I published the article today, though it was written a few months ago (when the DKIM record was still online).
8.
by awulf 2y ago
I agree, but to be precise, it was 1,726 out of 476,617 DKIM keys found across those 1M domains, or about 0.36%. Since it's impossible to determine all DKIM records a domain might have from the outside, I used a list of commonly used s
9.
Cracking a 512-bit DKIM key for less than $8 in the cloud(dmarcchecker.app)
799 points by awulf 2y ago|408 comments
10.
Most Common Errors in SPF Records(dmarcchecker.app)
1 points by awulf 2y ago|0 comments
11.
by awulf 2y ago
Shameless plug: My DMARC Checker at https://dmarcchecker.app/ displays a warning message if it encounters a DKIM signature header with an 'l=' tag: "The 'l=' tag limits how many bytes of the email b
12.
SPF, DKIM, and DMARC in 2024: Analyzing the Top 1M Domains(dmarcchecker.app)
3 points by awulf 2y ago|0 comments
13.
by awulf 3y ago
You are correct, the mail server is currently configured to only receive emails via IPv4. This setup is not uncommon as most major email providers have IPv4-only MX records (with Gmail and Yandex Mail being rare exceptions that support IPv6
14.
by awulf 3y ago
We've just launched the app this week. While white labeling is a possibility down the road, we're currently focused on refining it and gathering user feedback.
15.
by awulf 3y ago
Thanks for the feedback, much appreciated! It looks like you've flattened your SPF record, causing a large number of log messages. I'll see what I can do to better highlight the line that produces the 'pass' result.
16.
by awulf 3y ago
There was a small bug in our DMARC record parser (it didn't like the semicolon at the end of the record). Sorry for that. Your DMARC record is definitely correct. The issue should be fixed now. Also, thanks for the idea about circumven
17.
by awulf 3y ago
I'm really happy to read that the app was able to help! Thanks for sharing.
18.
Show HN: DMARC Checker(dmarcchecker.app)
70 points by awulf 3y ago|21 comments
19.
by awulf 5y ago
Thank you for the input. I have now added a separate "Templates" menu item.
20.
by awulf 5y ago
Basically, yes. In practice, there's a bit more to it. The user code is wrapped into an "async function(input)" (so you can use async/await) and run inside a worker inside a sandboxed iframe (for security reasons and for
21.
by awulf 5y ago
The main reason is ease of use. Of course, you can use JSFiddle to create an HTML page with a textarea field and a button that triggers your code and outputs the result to the console or somewhere else. But that's a lot of overhead for
22.
Show HN: TxtFiddle – JavaScript playground for text manipulation tasks(txtfiddle.com)
18 points by awulf 5y ago|7 comments
23.
Show HN: Device Mockup Templates for PowerPoint(shapechef.com)
3 points by awulf 10y ago|0 comments
24.
61% of developers are unfamiliar with wireframes(powermockup.com)
2 points by awulf 14y ago|0 comments
25.
by awulf 15y ago
That's strange, your grep looks fine to me. Is it possible that you have configured nginx to use different log files for different locations (or maybe don't log at all)? Other than that, I don't have any good explanation.
26.
by awulf 15y ago
It's an ASP.NET MVC 3 app running under Mono on Linux. The main components of the stack are: - nginx - Mono - ASP.NET MVC 3 - FastCGI Mono Server - MongoDB
27.
by awulf 15y ago
Replying to myself: 193 link checks in the last 30 minutes, and the servers are still up.
28.
by awulf 15y ago
To filter the list, just click on "Broken" in the "Link Status" box on the right.
29.
by awulf 15y ago
This is a repost from about two weeks ago. Back then, I had to remove the link after a few minutes because my little server couldn't handle the traffic spike and ran out of memory. During the last days I have added more server power and did
30.
Show HN (again): Web-based Link Checker with Blacklist Lookup(drlinkcheck.com)
14 points by awulf 15y ago|17 comments

More ›