upstream/certbot
1
0
Fork 0
mirror of https://github.com/certbot/certbot.git synced 2026-06-06 15:22:38 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

Reorder JSON file to emphasize MX policies over address-domain -> MX domain mapping.

Browse source
This commit is contained in:
Jacob Hoffman-Andrews 2014-06-09 10:12:09 -07:00
parent e534a43d1a
commit 79924108c7
1 changed files with 18 additions and 16 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

34
README.md
View file

@ -52,19 +52,11 @@ The basic file format will be JSON with comments (http://blog.getify.com/json-co
"timestamp": 1401093333
"author": "Electronic Frontier Foundation https://eff.org",
"expires": 1401414363, // epoch seconds
"address-domains": {
"gmail.com": {
"accept-mx-domains": ["google.com", "gmail.com"]
}
"yahoo.com": {
"accept-mx-domains": ["yahoodns.net"]
}
"eff.org": {
"accept-mx-domains": ["eff.org"]
}
}
"mx-domains": {
"eff.org": {
"*.yahoodns.net": {
"require-valid-certificate": true,
}
"*.eff.org": {
"require-tls": true,
"min-tls-version": "TLSv1.1",
"enforce-mode": "enforce"
@ -73,15 +65,25 @@ The basic file format will be JSON with comments (http://blog.getify.com/json-co
"sha1/YlrkMlC6C4SJRZSVyRvnvoJ+8eM="
]
}
"google.com": {
"*.google.com": {
"require-valid-certificate": true,
"min-tls-version": "TLSv1.1",
"enforce-mode": "log-only",
"error-notification": "https://google.com/post/reports/here"
},
"yahoodns.net": {
"require-valid-certificate": true,
}
}
// Since the MX lookup is not secure, we list valid responses to protect
// against DNS spoofing.
"address-domains": {
"yahoo.com": {
"accept-mx-domains": ["*.yahoodns.net"]
}
"gmail.com": {
"accept-mx-domains": ["*.google.com"]
}
"eff.org": {
"accept-mx-domains": ["*.eff.org"]
}
}
}