Please see:
https://list.sys4.de/hyperkitty/list/[email protected]/thread/FUUH4KTUI5PMDD44X6JV5KLIPVRCH27P/
TL;DR:
- DO publish ALL applicable intermediate CAs when any are published
- DON'T publish TLSA records matching long-retired LE CAs.
--
Viktor.
_______________________________________________
Postfix-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
