Ruaphoc

joined 2 years ago
sorted by: new top controversial old
Important reminder, if you own a domain name and don't use it for sending email. in c/[email protected]
[–] [email protected] 5 points 1 day ago (1 children)

@[email protected]

While you are securing your domain, 3 more good ideas:

  1. Enable DNSSEC. This will sign the dns query responses to help ensure your DKIM and TLSA can be trusted.

  2. Configure CAA records with only your TLS certificate issuer so any other certificates are not trusted.

  3. Configure DANE TLSA records with a hash of the public keys for your email server and websites. Also be sure to configure the “mta-sts.@“ subdomain to serve the correct text file. This will provide an additional chain of trust for your email server (and websites server).