5.17.4

Highlights

Checking a domain whose DNS answer holds a chain of names — aws.amazon.com and bka.de were the reported cases — raised AttributeError: 'NoneType' object has no attribute 'name' and aborted the whole run. The DNSSEC code inferred what an answer contained by counting record sets, so a two-record answer with no signature in it was handed to the validator. Records are now selected by name and type (#265).

Also in this release:

• The CSV tls column reported each MX host's starttls field rather than its tls field, and a check that was meant to fail the column when any host lacked support compared a string to False and never fired.
• Each module now logs through its own logger (checkdmarc.spf, checkdmarc.dnssec, and so on) instead of the root logger, so an application embedding this library can filter its output separately. CLI --debug output is unchanged.
• The lookup for obsolete SPF type records no longer catches and discards every exception.

See CHANGELOG.md for the full list.

What's Changed

• Fix DNSSEC crash on answers holding a chain of names (#265) by @seanthegeek in #266
• Clear the ruff backlog so CI lints clean again by @seanthegeek in #267

Full Changelog: 5.17.3...5.17.4