v1.5.0

What's Changed

• HSTS checks have been updated to behave better when testing a subdomain
  • Check the second-level domain when checking for preload (subdomains cannot be submitted)
  • If the includeSubdomains check fails it will attempt to check the second-level domain

v1.4.0

What's Changes

Two new checks for OCSP:

• SSL certificate must provide OCSP URI
• SSL certificate should provide OCSP must-staple (warning only)

Bumping minor version number as this can affect the score.

v1.3.0

What's Changes

• Expires check now passes if Cache-Control and Expires are both set. See: #24.

This change will mean that previously failing checks might now pass for some domains. As such the version number has been bumped to v1.3.

v1.2.7

What's changed

• Removed stray quote from check output (#30)

v1.2.6

What's Changed

• fix: Some certificate checks were not included in JSON response (#28)

v1.2.5

What's changed

• Add --version flag for outputting version information (#29)
• Include version information in JSON output

v1.2.4

What's Changed

• Fix the output of the Cache-Control expiry check

v1.2.3

What's Changed

• Fixed typo in SPF record output
• Added --version flag

v1.2.2

What's Changed

• Support checking SSL certificates on domains that are ipv6 only
• Fixes --doc when installed from PyPI
• CAA checks now work with domains that have a CNAME
• Additional (experimental) --check-filter and --request-filter options that help to reduce HTTP requests while testing
• The SPF check now ignores non-SPF records that are returned

Shoutout to @mejofi for reporting the bulk of the issue above and helping to make this tool better!

v1.2.1

PyPI version should work with this release