Security Sauce

Hi, Thanks for the PR, and sorry for late response. The output is a KV pair, separated by ','. So wondering why do we need to put quotes around org...

The script is filtering ',' chars from the value. Is this not sufficient: > org_name = (elem.findtext("org_name", 'NULL')).translate(None, ',') Ref: https://github.com/vquiering/dmarc-report-processor/blob/c91c878190faa9e6c28730a4a56332a94e7c3f11/bin/dmarc-parser.py#L36

thanks for the patch, @herrbpl I will test and merge it soon.

I think DKIM validation should be sufficient for reports sent over email. HTTPS POST may optionally leverage some signature using existing DKIM key. AFAIK, similar reporting stds such as DMARC...

10MB max for both email and HTTP post?. Anything that goes beyond the limit should be split into multiple requests. In general, what I have seen is that unlike DMARC,...

Thanks @BurakBoz. I will try to include this in the next release.

Yes, ideally both should appear in `tlsVersions` field. I guess, the code fails to add the default (initial) handshake `tlsVersion` to `tlsVersions` array. I will look into it. Thanks!

@stayallive, I was trying to replicate the reported issue, but I believe, I'm getting correct output. Please let me know if i missed out anything. ```bash $ ~/tls-scan/tls-scan -v tls-scan...

All dependencies are statically linked, so it could be something else :( .

I still could not reproduce this issue :( ```bash $ git clone https://github.com/prbinu/tls-scan.git Cloning into 'tls-scan'... $ cd tls-scan/ $ docker build -t tls-scan . [+] Building 543.2s (14/14) FINISHED...