Connexion Surveiller mes domaines

← nouveau scan

proton.me

Scanné il y a 27 h · Rescanner

Conformité expéditeur

SPF · DKIM · DMARC — 39/50

C

Durcissement

DNS & transport — 50/50

A+

~ SPF 10/15

SPF present with ~all (softfail). Hardfail (-all) is stronger. Uses 2/10 DNS lookups.
```
v=spf1 include:_spf.protonmail.ch ~all
```
→ Once all senders are listed, tighten ~all to -all.
```
TXT @  v=spf1 include:_spf.protonmail.ch -all
```
~ DMARC 14/20

DMARC present — p=quarantine, sp=quarantine.
```
v=DMARC1; p=quarantine; fo=1; aspf=s; adkim=s;
```
→ Strengthen DMARC: raise p to quarantine, then reject, once reports look clean; add rua= to receive aggregate reports.
```
TXT _dmarc.proton.me  v=DMARC1; p=reject; sp=reject; rua=mailto:dmarc@proton.me
```
✓ DKIM 15/15

Active DKIM key published for: protonmail, protonmail3.
```
protonmail, protonmail3
```
~ CAA 7/10

CAA present but no iodef reporting.
```
0 issue "letsencrypt.org" | 0 issue "sectigo.com"
```
→ Add an iodef record to be notified of unauthorized issuance attempts.
```
CAA @  0 iodef "mailto:security@proton.me"
```
✓ DANE/TLSA 5/5

DANE/TLSA published for every MX: mail.protonmail.ch, mailsec.protonmail.ch.
```
mail.protonmail.ch, mailsec.protonmail.ch
```
✓ MTA-STS 10/10

MTA-STS enforced — policy served and covers every MX (mail.protonmail.ch, mailsec.protonmail.ch).
```
v=STSv1; id=190906205100Z;
```

✓ TLS-RPT 5/5

TLS-RPT record present.

v=TLSRPTv1; rua=https://reports.proton.me/reports/smtptls

~ BIMI 3/5

BIMI present — logo=no, VMC=no.
```
v=BIMI1; l=; a=;
```
→ Add a logo (l=) in SVG Tiny PS, ideally with a VMC (a=).
✓ DNSSEC 10/10

DNSSEC enabled — DS published at the parent, chain of trust complete.
```
12382 8 2 0ebdded04fa7be35b5262d6b34f6a047b3105b15c2b69bc5544087d5b9d6e26b
```
✓ TLS web 10/5

HTTPS active — TLSv1.3.

Ce domaine n'est qu'un début — surveillez vos 40 domaines et soyez alerté à la moindre dérive.

Rejoindre la liste d'attente