I have the same aside from CA related (I don't see the point, if I lose control of a domain TLS is not a priority, and I can't stop rogue CA issuing a certifica

I have the same aside from CA related (I don't see the point, if I lose control of a domain TLS is not a priority, and I can't stop rogue CA issuing a certificate as CAA is basically unsupported) - also no bimi as it's a solution looking for a problem and not even in the right place.