resolution.nhs.uk

HTML metadata

Technology

Server

Sucuri

DNS records live

NS

• ns1.nhs.uk
• ns2.nhs.uk
• ns3.nhs.uk
• ns4.nhs.uk

MX

• 0 resolution-nhs-uk.mail.protection.outlook.com

TXT

• MS=87D4D5FDEEDDB22CEEA24CF6D098ACA1F3D289D7

Verified for

• Apple
• GlobalSign

Email authentication strong

SPF

v=spf1 ip4:35.214.110.107 include:spf.protection.outlook.com include:_spf.createsend.com include:_spf.nhs.net include:mail.zendesk.com -all

strict (-all)

DMARC

v=DMARC1; p=quarantine; pct=100; ruf=mailto:networkteam@resolution.nhs.uk; fo=1

policy: quarantine

DKIM

• selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC3scgpMP7FW7NLnDTS4d13dQ+T98P3xIQnWnbGpti/Mw/Aa/95FoKHNYUwQzLoNCt8G3caIbo2zzfVZUx+BU…
• selector2: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDJomxDO7Gp6GCXDTWC/5dAlTmlc5bCUT2HA84VmcVI1aaAGBV7LEVe0nqgWKd/T3ZIPWIucWDqIvEP14m1fo…

selectors probed

Certificate (current)

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 70/100 Checked live page: https://resolution.nhs.uk/

present

• content-security-policy
• x-frame-options
• x-content-type-options

findings

• missing HSTS
• missing Referrer Policy
• missing Permissions Policy

Linked from (1)

• drmalcolmkendrick.org×2