domainaware / checkdmarc

A parser for SPF and DMARC DNS records
https://domainaware.github.io/checkdmarc
Apache License 2.0
253 stars 78 forks source link

5.7.7, bimi logo and errors #150

Open Pascal76 opened 2 weeks ago

Pascal76 commented 2 weeks ago

Hello,

Just a question:

cases : 1/ checkdmarc n1.e-nocibe.fr 2/ checkdmarc m11.email.samsung.com

Why don't you add a json['bimi']['image']['errors'] for image issues as you do with certificate issues with json['bimi']['certificate']['validation_errors'] ?

Ex1:

Ex2:

The goal is to be able to extract the error per type (certificate, image, ...)

Pascal76 commented 2 weeks ago

Thank you @seanthegeek :)

Pascal76 commented 2 weeks ago

@seanthegeek

Add an error message to ["bimi"]["image]["error"] instead of ["bimi"]["warnings"] when a BIMI image download fails

Build 5.7.9 checkdmarc n1.e-nocibe.fr

"certificate": { "error": "Failed to download BIMI image at https://www.nocibe.fr/bibliotheque/documents/bimi.svg - 400 Client Error: Bad Request for url: https://www.nocibe.fr/bibliotheque/documents/bimi.svg" },

It is not located in ["bimi"]["image]["error"]

Pascal76 commented 6 days ago

more over you don't do exhaustive checks concerning the logo

ex: m11‍.‍email‍.‍samsung‍.‍com returns

  "validation_errors": [
    "The SVG version must be 1.2, not 1.1",
    "The SVG base profile must be tiny-ps"
  ]

BUT there are :
. missing or empty 'baseProfile' attribute . missing Title element . not allowed 'x', 'y', 'overflow' attributes

I don't know if you check the logo is a square too and if it is located on an https URL and the length of the title and the logo format (not a png)...