Escape colon in TLSRPT record

[dns.git] / src / openstreetmap

diff --git a/src/openstreetmap b/src/openstreetmap
index a505068f9262344cd995f70e1ac6b4085892ebd5..8a180a2e07bcaaa232268d77ed3258400b997ad0 100644 (file)
--- a/src/openstreetmap
+++ b/src/openstreetmap
@@ -24,12 +24,6 @@ Zopenstreetmap:a.ns.bytemark.co.uk:hostmaster.openstreetmap.org:::::300
 
 3a.mx.openstreetmap:200141c9000104000000000000000032
 
-# Delegate MTA-STS policy for subdomains
-
-Cmta-sts.noreply.openstreetmap:mta-sts.openstreetmap
-Cmta-sts.otrs.openstreetmap:mta-sts.openstreetmap
-Cmta-sts.messages.openstreetmap:mta-sts.openstreetmap
-
 # Publish an SPF record indicating that only shenron sends mail
 
 # https://anders.com/projects/sysadmin/djbdnsRecordBuilder/
@@ -37,6 +31,17 @@ Cmta-sts.messages.openstreetmap:mta-sts.openstreetmap
 'openstreetmap:v=spf1\040ip4\072212.110.172.32\040ip6\0722001\07241c9\0721\072400\072\07232\040mx\040-all:86400
 'otrs.openstreetmap:v=spf1\040ip4\072212.110.172.32\040ip6\0722001\07241c9\0721\072400\072\07232\040mx\040-all:86400
 
+# Announce MTA-STS policy and TLSRPT policy for error reports
+
+'_mta-sts.openstreetmap:v=STSv1;\040id=202001281902Z
+'_smtp._tls.openstreetmap:v=TLSRPTv1;\040rua=mailto\072postmaster@openstreetmap.org
+
+# Delegate MTA-STS policy for subdomains
+
+C_mta-sts.noreply.openstreetmap:_mta-sts.openstreetmap
+C_mta-sts.otrs.openstreetmap:_mta-sts.openstreetmap
+C_mta-sts.messages.openstreetmap:_mta-sts.openstreetmap
+
 # Google postmaster tools verification
 
 Caf323lytato5.openstreetmap:gv-o4v3qh5pfayqex.dv.googlehosted.com