|
22 | 22 | * BREACH check: list all compression methods and add brotli |
23 | 23 | * Test for old winshock vulnerability |
24 | 24 | * Test for STARTTLS injection vulnerabilities (SMTP, POP3, IMAP) |
25 | | -* STARTTLS: XMPP server support, plus new set of OpenSSL-bad binaries |
| 25 | +* STARTTLS: XMPP server support, plus a new set of OpenSSL-bad binaries |
| 26 | +* STARTTLS sieve support, plus again a new set of OpenSSL-bad binaries |
26 | 27 | * Several code improvements to STARTTLS, also better detection when no STARTTLS is offered |
| 28 | +* Detect throtteling via STARTTLS smtp |
27 | 29 | * Renegotiation checks more reliable against different servers |
28 | 30 | * STARTTLS on active directory service support |
29 | 31 | * Security fixes: DNS and other input from servers |
|
41 | 43 | * Added --user-agent argument to support using a custom User Agent |
42 | 44 | * Added --overwrite argument to support overwriting output files without warning |
43 | 45 | * Headerflag X-XSS-Protection is now labeled as INFO |
| 46 | +* Search for more HTTP security headers on the server |
44 | 47 | * Strict parser for HSTS |
45 | 48 | * DNS via proxy improvements |
46 | 49 | * Client simulation runs in wide mode which is even better readable |
47 | 50 | * Added --reqheader to support custom headers in HTTP requests |
48 | | -* Search for more HTTP security headers on the server |
49 | 51 | * Test for support for RFC 8879 certificate compression |
50 | | -* Deprecating --fast and --ssl-native (warning but still av) |
| 52 | +* Deprecating --fast and --ssl-native (warning only but still av) |
51 | 53 | * Compatible to GNU grep 3.8 |
52 | 54 | * Don't use external pwd command anymore |
53 | 55 | * Doesn't hang anymore when there's no local resolver |
|
0 commit comments