# Scanapse - dimaready.com

Mesuré : 2026-09-05T17:21:35+00:00

## Résumé
- 4 observations publiques sont documentées dans ce dossier.
- 1 dépendances publiques structurantes sont visibles.
- 55 évolutions utiles sont retenues depuis la lecture précédente.
- 4 points restent à confirmer ou ne sont pas observables de l’extérieur.

## Évolution
- Nouveau : Canary signal
- Nouveau : Cookie
- Nouveau : Csp evidence
- Disparu : Dependency provider
- Nouveau : Dependency provider
- Nouveau : Dns address
- Disparu : Dns address
- Nouveau : Dns address
- Disparu : Dns address
- Disparu : Dns address
- Disparu : Dns address
- Disparu : Dns nameserver

## Preuves
_preuve technique horodatée et vérifiable_
- mail_policy_flag - 
- tls_issuer - C = US, O = Let's Encrypt, CN = YR1
- dns_nameserver - ns11.infomaniak.ch
- module_finding - {"evidence":["ns11.infomaniak.ch","ns12.infomaniak.ch"],"severity":"low"}
- dmarc_record - v=DMARC1; p=reject;
- dnssec_evidence - {"chain_consistency":{"reason":"insufficient_record_evidence","state":"untested"},"dnskey":{"query_supported":false,"records":[],"state":"untested"},"ds":{"query_supported":false,"records":[],"state":"untested"},"validation":{"reason":"no_validating_resolver","state":"untested"}}
- mail_policy_flag - 
- module_finding - {"evidence":null,"severity":"low"}
- http_header - ["same-origin"]
- module_finding - {"evidence":null,"severity":"low"}
- http_header - ["no-referrer"]
- http_header - ["same-origin"]
- mail_transport_evidence - {"bimi":{"records":[],"state":"not_observed"},"dane_tlsa":{"query_supported":false,"reason":"tlsa_query_not_available","records":[],"state":"untested"},"dkim":{"reason":"no_selector_bruteforce","state":"untested"},"mta_sts":{"policy":null,"policy_state":"untested","records":[],"state":"not_observed"},"tls_rpt":{"records":[],"state":"not_observed"}}
- post_quantum_tls - {"capability":{"capable":false,"groups":[],"reason":"proc_open_unavailable"},"group":null,"reason":"client_capability_unavailable","state":"untested"}
- canary_signal - {"matches":[],"reason":"no_known_passive_signature_observed","signature_version":"2026.09.1","state":"not_observed"}
- http_header - ["default-src 'none'; base-uri 'none'; form-action 'self'; frame-ancestors 'none'; object-src 'none'; script-src 'self' 'nonce-HaeTEi9GfJQwkAijTDMtwPCY'; style-src 'self'; img-src 'self' data:; font-src 'self'; connect-src 'self'; manifest-src 'self'; worker-src 'self'"]
- dmarc_policy - reject
- dns_nameserver - ns12.infomaniak.ch
- cookie - {"http_only":true,"name":"dimaready_session","same_site":"strict","secure":true}
- module_finding - {"evidence":{"reason":"No external validating resolver is used; cryptographic validation is intentionally not inferred.","status":"not_tested"},"severity":"info"}
- module_finding - {"evidence":null,"severity":"info"}
- dns_address - 2001:1600::aaaa:0:0:80:5a
- module_finding - {"evidence":["ns11.infomaniak.ch","ns12.infomaniak.ch"],"severity":"medium"}
- http_header - ["Apache"]
- http_header - ["DENY"]
- http_header - ["nosniff"]
- spf_policy - hardfail
- module_finding - {"evidence":[{"host":"mta-gw.infomaniak.ch","priority":5}],"severity":"low"}
- http_header - ["camera=(), microphone=(), geolocation=(), payment=(), usb=()"]
- modern_transport_evidence - {"alpn":{"state":"untested","value":""},"certificate":{"cipher":"","issuer":"C = US, O = Let's Encrypt, CN = YR1","protocol":"","san_count":0,"state":"observed","valid_from":"2026-09-05T00:03:04+00:00","valid_to":"2026-12-04T00:03:03+00:00"},"http2":{"negotiated":"3","state":"untested"},"http3_advertised":{"alt_svc":"","state":"not_observed"},"ipv4":{"addresses":["185.125.27.195"],"state":"observed"},"ipv6":{"addresses":["2001:1600::aaaa:0:0:80:5a"],"state":"observed"}}
- dependency_provider - {"critical":true,"hosts":["mta-gw.infomaniak.ch","ns11.infomaniak.ch","ns12.infomaniak.ch"],"id":"infomaniak","known":true,"name":"Infomaniak","observation_count":3,"services":["dns","hosting","mail"],"tracker":false}
- csp_evidence - {"enforced":true,"frame_ancestors":true,"hash_present":false,"nonce_present":true,"object_src":true,"report_only":false,"reporting_endpoint":false,"state":"observed","strict_dynamic":false,"trusted_types":false}
- http_header - ["max-age=31536000; includeSubDomains"]
- tls_valid_to - 2026-12-04T00:03:03+00:00
- technology - {"name":"Apache","version":"","version_exposed":false}
- spf_record - v=spf1 include:spf.infomaniak.ch -all
- module_finding - {"evidence":null,"severity":"low"}
- mail_policy_flag - 
- dns_address - 185.125.27.195
- openpgp_discovery - {"dns_openpgpkey":{"reason":"recipient_identity_required","state":"untested"},"fingerprint":null,"mechanisms":[],"reason":"security_txt_encryption_not_observed","state":"not_observed","wkd":{"reason":"wkd_not_fetched_without_identity","state":"untested"}}
- mail_exchanger - mta-gw.infomaniak.ch

## Limites
- public_edge_does_not_reveal_origin
- provider_metadata_does_not_prove_processing_location
