5 ms·
> The Policy Host DNS name is constructed by prepending "mta-sts" to the Policy Domain. All the adopter has to do is set: mat-sts.his-domain A IP-OF-MAIL-HO
by megous 8y ago
> The Policy Host DNS name is constructed by prepending "mta-sts" to the Policy Domain.
All the adopter has to do is set:
mat-sts.his-domain A IP-OF-MAIL-HOST
or
mat-sts.his-domain CNAME HOST-NAME-OF-MAIL-HOST
And the mail hoster can take care of the reset, including getting a certifiacte for mat-sts.his-domain, and hosting a web server.
It's just more DNS records.
- technion 8y agoGoogle's implementation guide says: Add a subdomain to your domain. This is consistent with my reading of the RFC.
- icebraining 8y agoYou also have to set _mta-sts.his-domain TXT "v=STSv1; id=[POLICY VERSION ID];" And you have to update that ID every time the policy hosted on the web server changes.
- kseistrup 8y agoIt is very poor practice to use CNAME for things like this. In the example above, mat-sts.his-domain will inherit any records of his-domain: A, AAAA, MX, and what not. Don't use CNAME for this.