Also of relevance: https://www.mail-archive.com/dane-users@sys4.de/msg00142.html https://www.mail-archive.com/dane-users@sys4.de/msg00142.htm... Comcast publi

Also of relevance: https://www.mail-archive.com/dane-users@sys4.de/msg00142.html https://www.mail-archive.com/dane-users@sys4.de/msg00142.htm... Comcast published TLSA records the other day. So when people like myself who have enabled TLSA in Postfix send email to Comcast users, the SMTP connection is guaranteed to be both encrypted, and the SSL cert validated.