Skip to content
This repository has been archived by the owner on Feb 21, 2024. It is now read-only.

Latest commit

 

History

History
299 lines (232 loc) · 11.3 KB

Changelog.md

File metadata and controls

299 lines (232 loc) · 11.3 KB

Change Log

Next unreleased version

--- Brief description for next version ---

New

Changes

Bug Fixes

  • Typos.

Dependencies

Migrations

  • Transfer the repository to Platform Internetstandaarden (#569)

Settings

1.4

  • Mention LinkedIn next to Twitter in footer. [(#496)]
  • Add security.txt based on https://securitytxt.org/ [(#493)]
  • Update Django version to latest LTS version, together with dependencies [(#486)]
  • update version of Celery to the latest LTS version, together with dependencies [(#586)]
  • Improve description of the ipv4-ipv6 comparison results and what may be a reason for the differences [(#540)]
  • Add accessibility statement [(#562)]
  • Fix some minor typos and a broken [(#574)] [(#575)]
  • add a missing ' in the frame-ancestors explanation [(#578)]
  • an empty part of Content Security Policy gives an error [(#583)]
  • Refer to https://dutchcloudcommunity.nl/ on https://internet.nl/about/ [(#589)]
  • updated jquery (also stops support for very old browsers) [(#565)]
  • add DEFAULT_AUTO_FIELD to default config file [(#599)]
  • Added information/guidance for developers about the batch logic/code.

1.3.2

Hotfix release.

Changes

  • (Docker) Use pg_isready to check db availability on startup (#551)

Bug Fixes

  • CSP: subdomains not processed properly within default-src directive (#530)
  • Fix for Public Suffix List: do not ignore rules that include wildcards.
  • Key exchange parameter divergence (#538)
  • Fix for 'non email sending domains and DKIM' does not work for bare domains (#532)
  • Fix broken github tarball url for internetstandards/nassl (#549)
  • Work around Celery bug #5409 leaving stale pid files (#550)
  • Do not test redirects after test for first upgrade to HTTPS in "HTTPS redirect" subtest (#555)
  • Typos.

Dependencies

1.3.1

Hotfix release.

Bug Fixes

  • Pick the correct domain for checking nameservers. (#526)
  • Typos.

1.3.0

SSL_OP_PRIORITIZE_CHAHA support, support for more ciphers via the ModernConnection, explicit check for NULL MX, DKIM not required for non email sending domains, and more.

New

  • docker/it/targetbase/recreate-certificates.sh allows for easy recreation of the IT related certificates.
  • Support for SSL_OP_PRIORITIZE_CHACHA. (#461)
  • Introduce manual HoF page(s).
  • Support non email sending domains in mailtest for DKIM test. (#249)
  • Keep and display the organizational domain for DMARC.
  • 100% badges page in knowledge base. (#443)
  • Explicitly test for NULL MX. (#468)
  • Accessibility statement page. (#290)
  • Use IDNA2008. (#507)

Changes

  • Minimum max-age for HSTS is now 1 year. (#421)
  • Accept all 3xx+3xx and 3xx+2xx DANE rollover schemes. (#341)
  • Certificate Usage Field on TLSA records for email test. (#329)
  • Validate CSP directives. (#325)
  • Make X-Frame-Options optional and no longer consider ALLOW-FROM as sufficiently secure. (#503)
  • No prescribed cipher ordering within a security level. (#506)
  • Adjusted requirement level for client initiated renegotiation (informational). [(#510)]
  • Update to jquery 3.5.1 (#508)

Bug Fixes

  • Fix indefinite locks in cache (not a current problem).
  • Fix ip_similarity for batch results where no IPv6 nor Ipv4 connection was possible.
  • Better exception handling for untrusted certificate in OCSP check.
  • Keep the same configured socket timeout for subsequent TLS connections.
  • Nonces cause IPv4 vs IPv6 comparison to fail. (#463)
  • Can't test site with invalid IDN. (#484)
  • set_async(True) causes libunbound under celery to not honor config options set notable cache-max-ttl; remove for now.
  • ARIA and DSS algorithms not detected. (#477)

Dependencies

  • Updated python-pip-requirements.txt:
    • django-redis pinned to 4.10
    • celery bumped to 4.3.1 (vine dependency)
    • vine pinned to 1.3.0
    • beautifulsoup4 added (#463)
    • idna added (#507)

Migrations

  • New column in DB (mailtestauth_dmarc_record_org_domain). (#249)
  • New columns in DB for NULL MX. (#468)

Settings

  • New SMTP_EHLO_DOMAIN setting in settings.py. (#483)
  • New optional HAS_ACCESSIBILITY_PAGE setting in settings.py. (#290)

1.2.1

Hotfix release.

Bug Fixes

  • Fix broken connection test from 1.2.0; wrong variable name.

1.2.0

Update of the batch API to v2, removal of the X-XSS-Protection test, visual and content improvements for no-MX cases.

New

  • Batch API updated to v2. (#337) (#395) (#336) (#436)
  • No MX configured: informational status/icons and more suitable category verdict. (#455)
  • Remove test for X-XSS-Protection. (#456)

Bug Fixes

  • Fix breaking bug when the cert chain could not be received.
  • Fix breaking bug for daneTA hack.
  • Only use the translated local name from Django for configured languages.
  • Fix arbitrary text injection in news and FAQ articles.
  • Make sure to pick and test the same mailservers when the number of configured mailservers is greater than the allowed one.
  • Mailservers without STARTTLS support give wrong verdict. (#437)
  • IPv6 connectivity for nameservers. (#411)
  • Make sure only one SMTP connection is active at a time.
  • Fix uncaught exception when decrypting HTTPS data.
  • Fix for statistics page (days are missing). (#417)
  • Fix for connecting to either IPv4 or IPv6 for the mail test.
  • mail_starttls_tls_available icon when a server is not tested. (#457)
  • Typos.

1.1.2

Hotfix release.

Bug Fixes

  • Documentation update.
  • Content update.
  • Typos.

1.1.1

Hotfix release.

New

  • Ignore cipher order when only GOOD ciphers are supported.

Bug Fixes

  • Fix scoring bug on FS params.
  • Fix scoring bug when no starttls tests could be performed.
  • DHE should be SUFFICIENT not GOOD.
  • Fix JS bug for matomo.
  • Fix unhandled NoIpError exception.
  • Typos.

1.1.0

TLS 1.3 support, NCSCv2 guidelines, IT suite and more.

New

  • Update internet.nl to conform with the new v2 of the NCSC guidelines. (#402)
  • Updated Hall of Fame. (#170)

Dependencies

Bug Fixes

  • Long domain names break the design. (#401)
  • Use headings where text is styled as headings. (#389)
  • Alternative text for images | green and red shields statistics on homepage. (#387)
  • Contrast too low for text "Dated result ....". (#307)
  • Skiplink (to menu) does not work in small screens. (#306)
  • Fix the mailserver part of DNSSEC to give a warning when there are no mailservers.
  • Connection test: DNSSEC defaults to secure when no client connection. (#410)
  • Widget for embedding test on other websites. (#362)
  • HTML-element is closed while not opened based on @julezrulez commit. (#392)
  • Try to detect browser DoNotTrack. (#426)

1.0.3

Hotfix release.

Dependencies

  • The python-whois fork was updated. Make sure to pull the latest version and reinstall.

Bug Fixes

  • Uncaught exception from python-whois. (#374)
  • Typos.

1.0.2

Hotfix release.

Bug Fixes

  • Report unusable TLSA records as non-valid. (#372)

1.0.1

Hotfix release.

Bug Fixes

  • Don't check the root certificate's hash function. (#368)
  • Missing space between test explanation and technical details. (#369)

1.0.0

Initial public release.