TLS/STARTTLS check malfunction

domainaware / checkdmarc

A parser for SPF and DMARC DNS records

https://domainaware.github.io/checkdmarc

Apache License 2.0

244 stars 76 forks source link

TLS/STARTTLS check malfunction #138

Closed S1mple133 closed 1 month ago

S1mple133 commented 2 months ago

Hi!

While scanning the MX Domains of google.com with the command checkdmarc google.com, the output shows that starttls is not supported, as seen in the screenshot below

Other online ssl-tools like ssl-tools.net show that starttls is supported on the smtp.google.com domain.

BizzyBMW commented 1 month ago

I have the same problem and I believe the issue is related to SSL certificate verification. I just ran a quick test by temporarily disabling hostname verification and certificate verification, and the result is correct.