TLS: Check TLS version - Githubissues

steffenfritz / mxcheck

mxcheck is an info and security scanner for e-mail servers.

https://mxcheck.fritz.wtf

GNU General Public License v3.0

60 stars 8 forks source link

TLS: Check TLS version #25

Closed steffenfritz closed 8 months ago

steffenfritz commented 1 year ago

Is your feature request related to a problem? Please describe. mxcheck should check the TLS version and mark v1.2 as yellow and v1.3+ as green

darealdemayo commented 1 year ago

if you want traffic light system, may I suggest

red for unencrypted
yellow for STARTTLS and TLS <1.2
green for >=1.2

also, if multiple versions are available, warnings for weak versions should still be shown.

also, really great project, thanks for doing this!

steffenfritz commented 9 months ago

Working on this in in branch tlsversioncheck. The checks works on smtpd 25/tcp and submissions 587/tcp and 465/tcp, based on the results of the port scan.

steffenfritz commented 8 months ago

A check is implemented for the highest version of TLS, for TLS used with smtps and STARTTLS seperately.