internetstandards / Internet.nl-dashboard

Application that creates a dashboard for scans using the Internet.nl API.
Apache License 2.0
7 stars 11 forks source link

Simplify visible fields in reports #6

Closed stitch closed 5 years ago

stitch commented 5 years ago

Make it easier to configure visible fields. With the main benefit that end users better understand what they are testing.

Todo's

Example for the mail test:

=================================================================================================
PRESETS:
O All
O Baseline NL gov*
O Internet.nl-website fields
O None
=================================================================================================

=================================================================================================
Internet.nl website fields          | Additional fields
================================================|================================================   
                        |
                        | ⬜ Mail server configured
-------------------------------------------------------------------------------------------------
# ⬜ [IPv6]                  |
## [Name servers]               | ⬜ IPv6 name servers
### ⬜ IPv6 addresses for name servers       |   
### ⬜ IPv6 reachability of name servers     |
                        |
## [Mail server(s)]             | ⬜ IPv6 mail servers
### ⬜ IPv6 addresses for mail server(s) |
### ⬜ IPv6 reachability of mail server(s)   |
-------------------------------------------------------------------------------------------------
# ⬜ [DNSSEC]                    |
## [Email address domain]           | ⬜ DNSSEC mail domain*
### ⬜ DNSSEC existence mail domain      |
### ⬜ DNSSEC validity mail domain       |
                        |
## [Mail server domain(s)]          | ⬜ DNSSEC MX*
### ⬜ DNSSEC existence MX           |
### ⬜ DNSSEC validity MX            |
-------------------------------------------------------------------------------------------------
# ⬜ [DMARC, DKIM and SPF]           | 
                        | ⬜ Non sending domain
## [DMARC]                  |
### ⬜ DMARC existence*              |
### ⬜ DMARC policy              |
                        | ⬜ DMARC policy only* 
                        | ⬜ DMARC authorisation external reporting destination
                        | 
## ⬜ DKIM existence*                |
                        |
## [SPF]                    |
### ⬜ SPF existence*                |
### ⬜ SPF policy*               |
-------------------------------------------------------------------------------------------------
# ⬜ [STARTTLS and DANE]         | 
                        | ⬜ Mail server testable
                        | ⬜ STARTTLS NCSC*          
## [TLS]                    | 
### ⬜ STARTTLS available*           |
### ⬜ TLS version               |
### ⬜ Cipher suites             |
### ⬜ Key exchange parameters           |
### ⬜ TLS compression               |
### ⬜ Secure renegotiation          |
### ⬜ Client-iniated renegotiation      |
                        |
## [Certificate]                |
### ⬜ Trust chain of certificate        |
### ⬜ Public key of certificate     |
### ⬜ Signature of certificate          |
### ⬜ Domain name on certificate        |
                        |
## [DANE]                   | ⬜ DANE*
### ⬜ DANE existence                |
### ⬜ DANE validity             |
### ⬜ DANE rollover scheme      `   | 
                        | 
                        | ⬜ DANE TA-2 record
=================================================================================================
Explanation:
O = radio button
⬜ = check box
[..] = link to toggle on/off all child options under the linked parent
# = used to illustrate parent-child hierarchy
stitch commented 5 years ago

Presets and enabling or disabling in bulk are enhancements that take extra time and are out of focus for now. The new interface has been implemented and discussed and resembles the internet.nl reports a lot, which is convenient.

stitch commented 5 years ago

Renamed to describe the only remaining issue.

stitch commented 5 years ago
stitch commented 5 years ago

Create wireframe what it should like

stitch commented 5 years ago

Todo: when refactoring the table with the comparison results, also implement what columns should be visible on scan_method (web/mail) level for the table. Don't show ipv6 if no ipv6 field is visible. The selection is now based on a category setting itself, but the fields in the subcategory should be checked. See relevant_categories_based_on_settings which contains the old approach and the graph methods which contain the new one.

Todo: can we easily get the translations for the descriptions of each of the fields shown in the graphs? That would make things a bit nicer and self explantory.

image

stitch commented 5 years ago

Current status image

stitch commented 5 years ago

image

stitch commented 5 years ago

With tabs, using vue-tabs-component, which is both finished but also abandoned. Has a11y features.

image