X-Git-Url: https://git.openstreetmap.org/dns.git/blobdiff_plain/9a5d7370b5d0bbdd4da41f7cfbd29afb423f9803..92c136c904be9197783db936f54082355730d300:/src/openstreetmap

diff --git a/src/openstreetmap b/src/openstreetmap
index a505068..9f8f2fa 100644
--- a/src/openstreetmap
+++ b/src/openstreetmap
@@ -24,12 +24,6 @@ Zopenstreetmap:a.ns.bytemark.co.uk:hostmaster.openstreetmap.org:::::300
 
 3a.mx.openstreetmap:200141c9000104000000000000000032
 
-# Delegate MTA-STS policy for subdomains
-
-Cmta-sts.noreply.openstreetmap:mta-sts.openstreetmap
-Cmta-sts.otrs.openstreetmap:mta-sts.openstreetmap
-Cmta-sts.messages.openstreetmap:mta-sts.openstreetmap
-
 # Publish an SPF record indicating that only shenron sends mail
 
 # https://anders.com/projects/sysadmin/djbdnsRecordBuilder/
@@ -37,6 +31,17 @@ Cmta-sts.messages.openstreetmap:mta-sts.openstreetmap
 'openstreetmap:v=spf1\040ip4\072212.110.172.32\040ip6\0722001\07241c9\0721\072400\072\07232\040mx\040-all:86400
 'otrs.openstreetmap:v=spf1\040ip4\072212.110.172.32\040ip6\0722001\07241c9\0721\072400\072\07232\040mx\040-all:86400
 
+# Announce MTA-STS policy and TLSRPT policy for error reports
+
+'_mta-sts.openstreetmap:v=STSv1;\040id=202001291805Z
+'_smtp._tls.openstreetmap:v=TLSRPTv1;\040rua=mailto\072postmaster@openstreetmap.org
+
+# Delegate MTA-STS policy for subdomains
+
+C_mta-sts.noreply.openstreetmap:_mta-sts.openstreetmap
+C_mta-sts.otrs.openstreetmap:_mta-sts.openstreetmap
+C_mta-sts.messages.openstreetmap:_mta-sts.openstreetmap
+
 # Google postmaster tools verification
 
 Caf323lytato5.openstreetmap:gv-o4v3qh5pfayqex.dv.googlehosted.com