News for hackers. Stuff that matters.

A comment on Comcast Shot Themselves in the Foot with MTA-STS. Parent comment

Re:Comcast Shot Themselves in the Foot with MTA-STS by rovr138 on Wednesday January 19, 2022 @02:10PM (#29998503)
If you're using a provider, you're not on the hook for it.

Unless I'm mistaken in how this is implemented (not just server side)

[ Parent | on HN ]
Re:Comcast Shot Themselves in the Foot with MTA-STS by agwa on Wednesday January 19, 2022 @02:53PM (#29999087)
Your provider is on the hook for properly configuring TLS on their mail server, but you still need to publish an MTA-STS policy saying who your provider is.

Unless your provider provides MTA-STS endpoints that you can CNAME your _mta-sts and mta-sts subdomains to. I haven't seen anyone do this yet.

[ Parent | on HN ]