web-security

.well-known (RFC) is becoming an increasingly popular destination for stashing site-wide metadata. Some of that metadata is relevant to site security or may unintentionally leak information, so we should scan it.

Some starting points:

• Presence of/interesting things in an MTA-STS policy (RFC)
  • This might be

Expected behavior

Faster initialization of the platform on restart

Actual behavior

It is getting slower and slower because we initialize the cache with all the captures since the first time the platform was used

Solution (proposal)

• Have a background script that move all the captures > 2 months old in to an other directory. The captures will be sorted by month (month and