🌐 Website Issue | Issue on erine.email #1770

Closed
opened 2020-03-07 13:01:44 +00:00 by ghost · 3 comments
ghost commented 2020-03-07 13:01:44 +00:00 (Migrated from github.com)

Why was #1480 deleted?

Why was #1480 deleted?
Mikaela commented 2020-03-07 13:31:30 +00:00 (Migrated from github.com)

As far as I can see, @privacytoolsIO doesn't have issue deletions enabled (I don't have access to settings to check it, but I don't see a delete button e.g. with this issue) and the account that opened the issue is 404 error so I can only speculate that they have deleted their account or GitHub has done that.

On erine.email itself, there was a comment by @beerisgood

IPv6 problems, bad Security Headers, and bad website security itself.

so I think at least at that time it didn't pass the requirements at that time. I haven't checked if that has changed.

As far as I can see, @privacytoolsIO doesn't have issue deletions enabled (I don't have access to settings to check it, but I don't see a delete button e.g. with this issue) and the account that opened the issue is 404 error so I can only speculate that they have deleted their account or GitHub has done that. On erine.email itself, there was a comment by @beerisgood > IPv6 problems, bad Security Headers, and bad website security itself. * https://www.ssllabs.com/ssltest/analyze.html?d=erine.email * https://securityheaders.com/?q=https%3A%2F%2Ferine.email%2F&followRedirects=on * https://observatory.mozilla.org/analyze/erine.email so I think at least at that time it didn't pass the requirements at that time. I haven't checked if that has changed. * https://www.privacytools.io/providers/email/#criteria
dngray commented 2020-03-07 13:45:02 +00:00 (Migrated from github.com)

As far as I can see, @privacytoolsIO doesn't have issue deletions enabled (I don't have access to settings to check it, but I don't see a delete button e.g. with this issue) and the account that opened the issue is 404 error so I can only speculate that they have deleted their account or GitHub has done that.

I think you're right. In any case it won't be added as it does not meet the basic security requirements of our email criteria: https://www.hardenize.com/report/erine.email/1583588375

  1. No server suite preference
  2. Insecure anonymous suites supported
  3. Insecure key exchange detected
  4. No MTA-STS, TLS-RPT or DANE support

I wouldn't rely on it either, as it's hosted on an OVH VPS.

> As far as I can see, @privacytoolsIO doesn't have issue deletions enabled (I don't have access to settings to check it, but I don't see a delete button e.g. with this issue) and the account that opened the issue is 404 error so I can only speculate that they have deleted their account or GitHub has done that. I think you're right. In any case it won't be added as it does not meet the [basic security requirements](https://www.privacytools.io/providers/email/#criteria) of our email criteria: https://www.hardenize.com/report/erine.email/1583588375 1. No server suite preference 2. Insecure anonymous suites supported 3. Insecure key exchange detected 4. No MTA-STS, TLS-RPT or DANE support I wouldn't rely on it either, as it's hosted on an OVH VPS.
ghost commented 2020-03-07 14:06:29 +00:00 (Migrated from github.com)

I understand. Thank you very much.

I understand. Thank you very much.
This repo is archived. You cannot comment on issues.
No Milestone
No Assignees
1 Participants
Due Date
The due date is invalid or out of range. Please use the format 'yyyy-mm-dd'.

No due date set.

Dependencies

No dependencies set.

Reference: privacyguides/privacytools.io#1770
No description provided.