mailauth 0.3.0 → 0.3.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 77dfb8831d86e9be13316fe465a7655bf0aedf4da6164cdd0d2c4ab51cb5f6a4
-  data.tar.gz: dd67a9d118d2410deeb00d57f907075c9d77e58637f69b2989ed7c1066e01fd8
+  metadata.gz: b16ed1cec4ffbdbe20c947b204e28b417003a2c175622b3cc404cb902fe48535
+  data.tar.gz: a2c0c00468a940c523d727339503bce49317f756db2c1a886659601a295efc49
 SHA512:
-  metadata.gz: 3ebf36b61620326e742d838d3472dc32f8e9fb43812126e27e00daed54e947711167ab42742622432f28344b5ceeeee3d1d2348f1187212a4708c2138a821770
-  data.tar.gz: c35623984649fb47802e1a61386bbb8cdb91f192b2597209d5556ccafba35c97099afc482fa531837d94e54ce29a72131b82f6f25fdb2f19e446bbe03b7effd9
+  metadata.gz: 2a157fe9a86b4cc1e8ac95a433a0c31cc9235c71057900510be4426b37303b0b8099a23506ea46834693304923215e40c46b7c5a5b7843bfdf23445999835b54
+  data.tar.gz: e792cb0cc915924ecaa8205aa9023e756c9ad96e9ecec6ef9abd3653d634f875824b49ac5c8fc957e76ae192c3a11a75dff5da145809cbead1fc23f9353fbcfe

data/CHANGELOG.md

@@ -1,5 +1,10 @@
 # Changelog
 
+## 0.3.1
+
+- `temperror` when no nameserver is usable, rather than a raise
+- Documentation
+
 ## 0.3.0
 
 **A nameserver failing is no longer read as a domain publishing nothing.** Expect

data/README.md

@@ -1,10 +1,10 @@
 # mailauth
 
-✉️ Email authentication for Ruby
+✉️ Email authentication for Ruby.
 
-**mailauth** verifies SPF, DKIM, DMARC, and ARC on received mail, and signs outgoing mail with DKIM. Pure Ruby, no dependencies beyond `dnsruby`.
+Answers one question about a received message: is it really from who it says it's from?
 
-It answers one question about a message: is it really from who it says it's from?
+**mailauth** verifies SPF, DKIM, DMARC, and ARC on received mail, and signs outgoing mail with DKIM.
 
 ## Features
 
@@ -16,10 +16,22 @@ It answers one question about a message: is it really from who it says it's from
 - ARC verification (RFC 8617), reporting what each hop sealed and left to you to trust
 - Injectable resolver, so tests run against a hash instead of a network
 
-Not planned: MTA-STS (outbound TLS policy, not message auth), `Received-SPF` (Authentication-Results already covers it), `%{p}` (RFC 7208 discourages PTR).
-
 > Not a spam filter.
 
+## Contents
+
+- [Getting Started](#getting-started)
+- [Authentication](#authentication)
+- [Results](#results)
+- [Individual Checks](#individual-checks)
+- [When It Doesn't Pass](#when-it-doesnt-pass)
+- [Resolver](#resolver)
+- [ARC](#arc)
+- [Signing](#signing)
+- [Testing](#testing)
+- [History](#history)
+- [Contributing](#contributing)
+- [License](#license)
 
 ## Getting Started
 
@@ -125,8 +137,6 @@ end
 - `permerror` - the record or signature is broken; retrying changes nothing
 - `none` - the domain published no policy, or the message carried no signature
 
-
-
 ## Resolver
 
 Every lookup goes through one object with five methods - `txt`, `a`, `aaaa`, `mx`, `ptr`:
@@ -137,7 +147,7 @@ MailAuth.authenticate(raw, ip: ip, resolver: MyCachingResolver.new)
 
 Raise `NotFound` for a void lookup (SPF counts these against a limit), `Timeout` or `ServerFailure` for no answer, which produces a `temperror` that stops evaluation. Collapsing those into empty arrays loses a distinction SPF spends much of its rulebook on.
 
-The default resolver uses [dnsruby](https://github.com/alexdalitz/dnsruby) rather than `Resolv`, which collapses SERVFAIL/REFUSED into the same empty answer as NXDOMAIN. It caches nothing and does not validate DNSSEC.
+The default resolver uses [dnsruby](https://github.com/alexdalitz/dnsruby) rather than `Resolv`, which collapses SERVFAIL/REFUSED into the same empty answer as NXDOMAIN.
 
 ## ARC
 
@@ -185,27 +195,19 @@ bundle install
 rake
 ```
 
-SPF runs against the [RFC 7208 test suite](http://www.openspf.org/Test_Suite) - 200 official cases covering every mechanism, the lookup limits, and the error semantics. One case is skipped: `p-macro-multiple`, which needs PTR forward-confirmation this library doesn't do.
-
-DKIM runs against the sample message in RFC 8463 Appendix A, which carries both an RSA and an Ed25519 signature over the same body. Signing is held to the same standard: both algorithms are deterministic, so signing the sample message with its published private keys must reproduce the published signatures byte for byte.
-
-ARC runs against the [ValiMail ARC test suite](https://github.com/ValiMail/arc_test_suite) - 171 cases over chain validation, header structure, tag grammar, and key strength.
-
 ## History
 
-View the changelog
+View the [changelog](CHANGELOG.md).
 
 ## Contributing
 
 Everyone is encouraged to help improve this project:
 
-- [Report bugs](https://github.com/example/mailauth/issues)
+- [Report bugs](https://github.com/mailpiece/mailauth/issues)
 - Fix bugs and submit pull requests
 - Write, clarify, or fix documentation
 - Suggest or add new features
 
-
-
 ## License
 
 MIT. See [LICENSE](LICENSE).

data/lib/mailauth/resolver.rb

@@ -82,6 +82,9 @@ module MailAuth
           dns.do_caching = false
           dns.query_timeout = @timeout
         end
+      rescue ArgumentError => error
+        # Dnsruby raises this when no configured nameserver is usable.
+        raise ServerFailure, "no usable nameserver: #{error.message}"
       end
 
       # Override in tests to point at a loopback nameserver.

data/lib/mailauth/version.rb

@@ -1,3 +1,3 @@
 module MailAuth
-  VERSION = "0.3.0"
+  VERSION = "0.3.1"
 end

data/mailauth.gemspec

@@ -7,9 +7,8 @@ Gem::Specification.new do |spec|
   spec.platform = Gem::Platform::RUBY
   spec.required_ruby_version = ">= 3.3.4"
   spec.authors = [ "Simon Lev" ]
-  spec.email = [ "support@postrider.dev" ]
 
-  spec.summary = "SPF, DKIM, DMARC, and ARC verification for received mail, in pure Ruby."
+  spec.summary = "Email authentication for Ruby."
   spec.description = "Answers one question about a received message: is it really from who it says it's from?"
 
   spec.homepage = "https://github.com/mailpiece/mailauth"
@@ -33,7 +32,7 @@ Gem::Specification.new do |spec|
   spec.require_paths = [ "lib" ]
 
   # Resolv collapses SERVFAIL/REFUSED into empty answers; dnsruby does not.
-  spec.add_dependency "dnsruby", "~> 1.72"
+  spec.add_dependency "dnsruby", "~> 1.74"
   spec.add_dependency "public_suffix", ">= 5.0"
   spec.add_dependency "simpleidn", "~> 0.2"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: mailauth
 version: !ruby/object:Gem::Version
-  version: 0.3.0
+  version: 0.3.1
 platform: ruby
 authors:
 - Simon Lev
@@ -15,14 +15,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '1.72'
+        version: '1.74'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '1.72'
+        version: '1.74'
 - !ruby/object:Gem::Dependency
   name: public_suffix
   requirement: !ruby/object:Gem::Requirement
@@ -53,8 +53,6 @@ dependencies:
         version: '0.2'
 description: 'Answers one question about a received message: is it really from who
   it says it''s from?'
-email:
-- support@postrider.dev
 executables: []
 extensions: []
 extra_rdoc_files: []
@@ -112,5 +110,5 @@ required_rubygems_version: !ruby/object:Gem::Requirement
 requirements: []
 rubygems_version: 4.0.3
 specification_version: 4
-summary: SPF, DKIM, DMARC, and ARC verification for received mail, in pure Ruby.
+summary: Email authentication for Ruby.
 test_files: []