Heho, no, i at least make the assumption that the people who get themselves to implement MTA-STS (in either direction) will also have PKIX valid certs.
And that group of orgs is relatively small. In contrast, you can, e.g., just enable dane for you N-thousand customers by adding records to _your_ MXes. But, as said some years ago when i first complained about this: I wasn't there to give this input when it was spec'ed; So my complaining now also has _some_ limits. ;-) With best regards, Tobias _______________________________________________ mailop mailing list mailop@mailop.org https://list.mailop.org/listinfo/mailop