Peter Thomassen

A11y: basic accessibility improvements

10

For screenreader users, - [ ] add aria-labels to webapp buttons - [ ] make progress bar at the top of page less irritating - [ ] add headings to...

api: Scoped tokens

17

e.g. by domain, or use case (_acme-challenge)

log PII cleanup

6

- Action tokens may be part of URLs which get logged. Make sure no PII is recoverable from them (e.g. email addresses).

Scan zones and notify owner if CNAMEs/DNAMEs/MX/... are dangling (and potentially subject to subdomain takeover). Can be combined with scanning for DS records etc.

In case we could get rid of nsmaster, observe the following from today's pdns IRC: ``` How does pdns' outgoing AXFR performance compare between an online-signing master and a presigned...

Title says it all. Example log: ``` Oct 13 21:49:38 digga desec/www[25547]: update.dedyn.io:443 79.231.19.56 - cmvdo.dedyn.io [13/Oct/2021:19:49:38 +0000] "GET /nic/update?hostname=[...]&myip=2003:[...]:204d,79.[...].56 HTTP/1.0" 400 179 "-" "Deutsche Telekom - Speedport Smart 4...

The library can be an independent repository / open source module on pypi.org.