1
0
mirror of https://blitiri.com.ar/repos/chasquid synced 2026-01-08 17:51:57 +00:00

domaininfo: New package to track domain (security) information

This patch introduces a new "domaininfo" package, which implements a
database with information about domains.  In particular, it tracks
incoming and outgoing security levels.

That information is used in incoming and outgoing SMTP to prevent
downgrades.
This commit is contained in:
Alberto Bertogli
2016-10-13 02:28:30 +01:00
parent 1d7a207e00
commit c013c98283
8 changed files with 545 additions and 11 deletions

View File

@@ -0,0 +1,28 @@
syntax = "proto3";
package domaininfo;
enum SecLevel {
// Does not do TLS.
PLAIN = 0;
// TLS client connection (no certificate validation).
TLS_CLIENT = 1;
// TLS, but with invalid certificates.
TLS_INSECURE = 2;
// TLS, with valid certificates.
TLS_SECURE = 3;
}
message Domain {
string name = 1;
// Security level for mail coming from this domain (they send to us).
SecLevel incoming_sec_level = 2;
// Security level for mail going to this domain (we send to them).
SecLevel outgoing_sec_level = 3;
}