• v0.8.0 03af5615ae

    checker: implement ShareKey to mutualise TLS probes across targets
    All checks were successful
    continuous-integration/drone/tag Build is passing
    continuous-integration/drone/push Build is passing

    nemunaire released this 2026-06-18 06:27:54 +00:00 | 0 commits to master since this release

    A TLS probe result depends only on the set of endpoints actually dialed and
    the probe knobs, never on which domain or service published them: the
    observation is a map keyed by each endpoint's contract Ref
    (host|port|effective SNI|STARTTLS|require). Implement sdk.ObservationSharer so
    the host dials a host:port once and serves every target that resolves to the
    same endpoint set, instead of re-handshaking per record. This is the
    highest-value case among the checkers, since dane, xmpp, srv, dav, … all
    funnel their endpoints into this single checker.

    The share key sorts the endpoint Refs and folds in the probe timeout and the
    cipher-enumeration flag, since both change what is collected (a tighter
    timeout can fail a slow handshake; enumeration adds the Enum block). An empty
    or unparseable entry set yields "" so the host falls back to per-target
    caching.

    Downloads