Internet.nl

Internet.nl copied to clipboard

The production instance uses 80 gig in /var and 50 gig for the database. This will continue to grow at an unknown rate, for reasons that might be nonsensical (such...

stitch

The python source is now mixed with docker, documentation, htmlcov, coverage files and a ton of other stuff that is not relevant to the application. This should be separated more...

stitch

The batch and interface code are now located in the same spot. To clear up the code, and make it easier to work with, move the batch code to it's...

stitch

The news article content is taking up about 100 megabyte of space, while the rest is pretty small. To prevent LFS issues while this repo is cloned more often, move...

stitch

Currently not all Elliptic Curves are detected and/or classified correctly. The IT Security Guidelines for Transport Layer Security (NCSC) lists four EC's that are "Good", one that is "Phase out",...

dennisbaaten

Do not reuse timed out IP addresses in the STARTTLS test

9

There is a case that mail administrators advertise IP addresses that always timeout in order to deter spammers. When such an IP is encountered it should be ignored for further...

gthess

Test SHA1 usage DNSSEC

6

Test DNSSEC chain for SHA1 usage for DS and DNSKEY. Also test for 512-bit RSA KSK/ZSK. Also see: https://twitter.com/VDukhovni/status/978077604711411713

ralphdolmans

baknu

When changing language on a news item page, you will not get the same but the latest news item in the other language.

baknu

Making visible if TLS 1.3 and/or TLS 1.2 is used

13

Currently we only show in the tech table of the "TLS version" subtest what TLS versions are PHASE OUT or INSUFFICIENT (if we detect these). It would be helpfull if...

baknu