David Huser

@faebudo@ioc.exchange I believe to have fixed these issues on https://mxmap.ch by introducing a confidence score instead of binary classification

@spiezmaestro@social.spiezmaestro.ch @adfichter@infosec.exchange Hier sind die Daten für Thun: https://github.com/davidhuser/mxmap/blob/28ffd4f2e666a36818bd844b4eae7e4b8a187565/data.json#L8414-L8433 Die Klassifikation stuft thun.ch als "independent" ein, weil die MX-Records auf eigene Mailserver auf ASN 9044 verweisen. Das include:spf.protection.outlook.com im SPF autorisiert lediglich den Versand über M365 (fokus auf MX)

@Beleggrodion@swiss.social I updated the pipeline to look for gateways and use a neat autodiscover check suggested by another reply here. More M365 now

@faebudo@ioc.exchange thanks a lot for your idea, I could identify some more M365 by the autodiscovery approach (from 992 to 1057 now).

@datenschatz@norden.social I‘ve seen the map but not the code or blog, will put a ref into the readme file, thanks! Yes I thought areas are more explanatory

@faebudo@ioc.exchange thanks! I updated it to look for these gateways and if the spf record is M365 it‘s flagged as such

@i@toot.pouyan.net thanks!

on 1. no there is no officially maintained list AFAIK, the data source is Wikipedia (wikidata via sparql). There might be errors and missing URLs so I search for candidates like "commune-XY.ch" as well.

on 2. not yet, but will look into it

@Beleggrodion@swiss.social thanks, looking into it, and how to reflect them on the map

Where does your commune host email? I did an analysis via DNS records and plotted it on a map:

https://mxmap.ch/

This is an early version, looking for feedback 👀

#digitalsovereignty #dns