> On Sep 5, 2017, at 10:51 AM, Brotman, Alexander 
> <[email protected]> wrote:
> 
> Quick conversation with some DNS folks, and they say that we can publish a 
> TXT record at the apex of a delegated sub-domain.  CNAMEs would not be 
> allowed, but A/TXT should be okay.

DNS delegation is much too complex for this purpose.  Far simpler:

DNS:
    example.com. IN MX 0 mx1.provider.net.
    example.com. IN MX 0 mx2.provider.net.
    _mta-sts.example.com. IN CNAME _mta-sts.provider.net.

HTTP:
C:  GET https://mta-sts.example.com/.well-known/mta-sts.txt HTTP/1.1
C:  Host: mta-sts.example.com

S: 302 Get thee to a punnery
   Location: https://mta-sts.provider.net/.well-known/mta-sts.txt

-- 
        Viktor.

_______________________________________________
Uta mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/uta

Reply via email to