7 ms·
I'd like to be wrong, but with the nature of this standard, I don't expect heavy adoption. If a person is deploying G Suite or Office 365 or similar, they get a
by technion 8y ago
I'd like to be wrong, but with the nature of this standard, I don't expect heavy adoption.
If a person is deploying G Suite or Office 365 or similar, they get asked to setup MX records, TXT for SPF, possibly DKIM and so on. If I could create a record that says "use the policy Microsoft/Google publish", it would be a no brainer. And it would take off because, much like SPF, these groups can just add it to their onboarding checklist.
As soon as you say "deploy an end point on your domain", it falls in the too hard basket for unimportant domains. Moreover, in a corporate situation the people running mail have no involvement in web endpoints. For the mail domains I professionally manage, that falls into the domain of another department, and the people involved in running web endpoints are going to say something like "if it was important, Wordpress would do it already for us".
- megous 8y ago> The Policy Host DNS name is constructed by prepending "mta-sts" to the Policy Domain. All the adopter has to do is set: mat-sts.his-domain A IP-OF-MAIL-HOST or mat-sts.his-domain CNAME HOST-NAME-OF-MAIL-HOST And the mail hoster can take care of the reset, including getting a certifiacte for mat-sts.his-domain, and hosting a web server. It's just more DNS records.
- technion 8y agoGoogle's implementation guide says: Add a subdomain to your domain. This is consistent with my reading of the RFC.
- icebraining 8y agoYou also have to set _mta-sts.his-domain TXT "v=STSv1; id=[POLICY VERSION ID];" And you have to update that ID every time the policy hosted on the web server changes.
- kseistrup 8y agoIt is very poor practice to use CNAME for things like this. In the example above, mat-sts.his-domain will inherit any records of his-domain: A, AAAA, MX, and what not. Don't use CNAME for this.
- snazz 8y agoI think that simply having Gmail use (evetually require?) it is enough for heavy adoption. Like it or not, they can push whatever they want through standards bodies no matter how ridiculous.
- technion 8y agoMy issue would be that even if "gmail use it", people using G Suite with custom domains probably aren't.