v1.6.1

Full Changelog: v1.6.0...v1.6.1

v1.6.0

What's Changed

• feat: allow other DoH servers to be used for DNS lookups by @sesh in #32
• feat: use python 3.12 in github actions by @sesh in #33
• feat: short-lived certs always pass OCSP checks by @Seirdy in #42
• fix: increase the cert expiry days to 398. Fixes #38

Full Changelog: v1.5.0...v1.6.0

v1.5.0

What's Changed

• HSTS checks have been updated to behave better when testing a subdomain
  • Check the second-level domain when checking for preload (subdomains cannot be submitted)
  • If the includeSubdomains check fails it will attempt to check the second-level domain

v1.4.0

What's Changes

Two new checks for OCSP:

• SSL certificate must provide OCSP URI
• SSL certificate should provide OCSP must-staple (warning only)

Bumping minor version number as this can affect the score.

v1.3.0

What's Changes

• Expires check now passes if Cache-Control and Expires are both set. See: #24.

This change will mean that previously failing checks might now pass for some domains. As such the version number has been bumped to v1.3.

v1.2.7

What's changed

• Removed stray quote from check output (#30)

v1.2.6

What's Changed

• fix: Some certificate checks were not included in JSON response (#28)

v1.2.5

What's changed

• Add --version flag for outputting version information (#29)
• Include version information in JSON output

v1.2.4

What's Changed

• Fix the output of the Cache-Control expiry check

v1.2.3

What's Changed

• Fixed typo in SPF record output
• Added --version flag