Jacob Hoffman-Andrews
cebc6f9a20
ProcessGoogleSTARTTLSDomains -> latest CSV format.
...
Also output in a more useful format, require >= 99% encrypted output in the CSV,
hande .{...} domains, and manually add gmail.com.
2014-08-08 13:28:01 -04:00
Jacob Hoffman-Andrews
749c4e39e0
Update meta-config with latest domains.
2014-08-07 17:34:40 -04:00
Jacob Hoffman-Andrews
6a1aa8e6b6
Update to latest config format.
2014-08-07 17:34:21 -04:00
Jacob Hoffman-Andrews
bdd4d01dc7
Update and sort golden-domains.txt, commit google-starttls-domains.csv
2014-08-07 16:57:51 -04:00
Jacob Hoffman-Andrews
6a40e1964b
Notice if there are no "Trusted" entries.
2014-08-07 15:05:10 -04:00
Jacob Hoffman-Andrews
82ef8b185a
Merge branch 'master' of github.com:EFForg/starttls-everywhere into misc
...
Conflicts:
MTAConfigGenerator.py
starttls-everywhere.json
2014-08-06 18:26:31 -04:00
Jacob Hoffman-Andrews
dd4f9d35ae
Improve checker and starttls-everywhere.json.
...
Now we alphabetize keys on output for more useful diffs.
2014-08-06 18:23:13 -04:00
Jacob Hoffman-Andrews
127d49e837
Manually add a couple known-good domains.
...
These were skipped because in the Google data they are represented as,
e.g. 'gmail.{..}'.
2014-08-06 18:22:32 -04:00
Jacob Hoffman-Andrews
a85fad98c0
Restore default config
2014-08-06 18:22:08 -04:00
Jacob Hoffman-Andrews
1c3c69aaad
Allow parameters to MTAConfigGenerator.
2014-08-06 17:08:49 -04:00
Jacob Hoffman-Andrews
3de8c2a651
Do a better job finding address domain from mx doman.
2014-08-06 17:08:30 -04:00
Peter Eckersley
803c39e585
Merge remote-tracking branch 'github/master'
...
Conflicts:
ConfigParser.py
2014-06-19 09:11:15 -07:00
Jacob Hoffman-Andrews
51980e212f
First pass at logs analysis
2014-06-18 17:50:41 -04:00
Peter Eckersley
3df343495e
Various fixups
2014-06-18 10:58:53 -07:00
Peter Eckersley
45aeb5b003
Merge remote-tracking branch 'github/master'
...
Conflicts:
ConfigParser.py
starttls-everywhere.json
2014-06-18 10:56:48 -07:00
Jacob Hoffman-Andrews
67ee3b0488
Config format change - don't use * as it's misleading.
2014-06-18 12:32:17 -04:00
Peter Eckersley
2eba47a716
Verify more of the policy language
2014-06-16 14:23:51 -07:00
Jacob Hoffman-Andrews
51f90ffafb
Write policies based on address domain, not stripped mx-domain
2014-06-16 18:26:56 +00:00
Peter Eckersley
8d6b6c358a
Merge branch 'master' of ssh://github.com/jsha/starttls-everywhere
...
Conflicts:
MTAConfigGenerator.py
2014-06-16 02:47:15 -07:00
Peter Eckersley
9da4f93ae5
Changes for live demo
2014-06-16 02:46:46 -07:00
Jacob Hoffman-Andrews
3cf61a54b7
Add alternatives section
2014-06-13 13:57:19 -04:00
Jacob Hoffman-Andrews
43d457aa77
Typo cleanup in MTAConfigGenerator
2014-06-12 13:18:20 -04:00
Jacob Hoffman-Andrews
499f6c2fad
Add comment to ProcessgoogleSTARTTLSDomains.py
2014-06-12 11:53:02 -04:00
Jacob Hoffman-Andrews
9cd71642fb
Fix italicization boundaries
2014-06-12 11:50:39 -04:00
Jacob Hoffman-Andrews
7a7329fa19
Merge remote-tracking branch 'pde/master'
2014-06-12 11:49:09 -04:00
Jacob Hoffman-Andrews
9ce047980a
Add .gitignore
2014-06-12 11:40:17 -04:00
Peter Eckersley
02abaf57bd
Remove stray conf entry from README
2014-06-12 05:24:51 -07:00
Peter Eckersley
3d7b53daf1
Tune verbosity; reload postfix conf if we can
2014-06-12 05:24:05 -07:00
Peter Eckersley
e99abfacfd
Include the demo example with the real stuff, temporarily
2014-06-12 05:22:30 -07:00
Peter Eckersley
a2ee328bc0
Paramaterise "/etc/postfix"
2014-06-11 10:32:52 -07:00
Peter Eckersley
34cba3accf
Now successfully parsing the larger policy set
2014-06-11 09:51:56 -07:00
Peter Eckersley
3712a45399
Further (and different, and better) standardisation
2014-06-11 09:48:43 -07:00
Peter Eckersley
182e9b29e4
Trying to standardize JSON terms
2014-06-11 09:42:17 -07:00
Peter Eckersley
2540f1f1e8
Writing to the domain-wise policy file actually works now.
2014-06-11 09:31:41 -07:00
Peter Eckersley
eea1b0d8c5
Switch naming conventions so that modules are importable :)
...
It turns out that python won't import modules with hyphens in their names.
It seems that CamelCase is most consistent with our Class naming. However
feel free to do something different instead :)
2014-06-11 09:18:56 -07:00
Peter Eckersley
6e1bcfdb2a
WIP implementing domain-wise TLS policies
2014-06-11 09:17:50 -07:00
Peter Eckersley
d7e4d93190
Merge branch 'master' of ssh://github.com/jsha/starttls-everywhere
2014-06-11 09:13:01 -07:00
Jacob Hoffman-Andrews
0c4e332811
Set up test CA and valid signed cert by that CA.
...
Also require valid cert for host 'valid'.
2014-06-11 11:45:28 -04:00
Peter Eckersley
46ce09d36d
MTA config wrangling seems to work
2014-06-11 05:01:46 -07:00
Peter Eckersley
269f15f9ee
Merge branch 'master' of ssh://github.com/jsha/starttls-everywhere
2014-06-11 00:38:40 -07:00
Jacob Hoffman-Andrews
21e841fd13
Move synced folders into a common one.
...
Also, create certificates.
2014-06-10 15:08:52 -04:00
Peter Eckersley
a03db04ff4
WIP implementing deletion of existing cf lines
2014-06-10 08:08:40 -07:00
Peter Eckersley
d0bcc13059
Break ground on an postfix config wrangling engine
2014-06-10 08:08:17 -07:00
Jacob Hoffman-Andrews
17425e7337
Merge branch 'master' of github.com:jsha/starttls-everywhere
...
Conflicts:
README.md
2014-06-09 14:56:34 -07:00
jsha
7bdb63376c
Merge pull request #2 from pde/master
...
Initial checkin of config parser, some changes to the config format.
2014-06-09 14:53:23 -07:00
Jacob Hoffman-Andrews
bdbc46fc84
Add candidate starttls-everywhere config json
2014-06-09 13:10:43 -07:00
Jacob Hoffman-Andrews
0d43d2988a
Update check-starttls.py to generate starttls everywhere config.
2014-06-09 13:08:01 -07:00
Jacob Hoffman-Andrews
79924108c7
Reorder JSON file to emphasize MX policies over address-domain -> MX domain mapping.
2014-06-09 10:12:09 -07:00
Peter Eckersley
c033905b16
Now validating most of the config json
2014-06-08 06:22:32 -07:00
Peter Eckersley
839c523048
Fix typos
2014-06-08 06:22:22 -07:00