quickstart: check if domain was registered recently, and warn about potential deliverability issues

we use 6 weeks as the cutoff, but this is fuzzy, and will vary by mail
server/service provider.

we check the domain age using RDAP, the replacement for whois. it is a
relatively simple protocol, with HTTP/JSON requests. we fetch the
"registration"-related events to look for a date of registration.
RDAP is not available for all country-level TLDs, but is for most (all?) ICANN
global top level domains. some random cctlds i noticed without rdap: .sh, .au,
.io.

the rdap implementation is very basic, only parsing the fields we need. we
don't yet cache the dns registry bootstrap file from iana. we should once we
use this functionality from the web interface, with more calls.
This commit is contained in:
Mechiel Lukkien
2025-02-07 11:16:30 +01:00
parent c7354cc22b
commit 2f0997682b
5 changed files with 322 additions and 3 deletions

View File

@ -454,3 +454,11 @@ See implementation guide, https://jmap.io/server.html
9077 -? - NSEC and NSEC3: TTLs and Aggressive Use
9157 -? - Revised IANA Considerations for DNSSEC
9276 -? - Guidance for NSEC3 Parameter Settings
# RDAP
7480 - - HTTP Usage in the Registration Data Access Protocol (RDAP)
7481 - - Security Services for the Registration Data Access Protocol (RDAP)
8056 - - Extensible Provisioning Protocol (EPP) and Registration Data Access Protocol (RDAP) Status Mapping
9082 - - Registration Data Access Protocol (RDAP) Query Format
9083 - - JSON Responses for the Registration Data Access Protocol (RDAP)
9224 - - Finding the Authoritative Registration Data Access Protocol (RDAP) Service