:openstreetmap:257:\000\005\151\163\163\165\145\154\145\164\163\145\156\143\162\171\160\164\056\157\162\147
-# Make the virtual machine the primary MX with Bytemark as backup
+# Make the virtual machine the primary MX
@openstreetmap:212.110.172.32:a:10
@noreply.openstreetmap::a.mx.openstreetmap:10
'openstreetmap:v=spf1\040ip4\072212.110.172.32\040ip6\0722001\07241c9\0721\072400\072\07232\040mx\040-all:86400
'otrs.openstreetmap:v=spf1\040ip4\072212.110.172.32\040ip6\0722001\07241c9\0721\072400\072\07232\040mx\040-all:86400
+# Announce MTA-STS policy and TLSRPT policy for error reports
+
+'_mta-sts.openstreetmap:v=STSv1;\040id=202001281902Z
+'_smtp._tls.openstreetmap:v=TLSRPTv1;\040rua=mailto\072postmaster@openstreetmap.org
+
+# Delegate MTA-STS policy for subdomains
+
+C_mta-sts.noreply.openstreetmap:_mta-sts.openstreetmap
+C_mta-sts.otrs.openstreetmap:_mta-sts.openstreetmap
+C_mta-sts.messages.openstreetmap:_mta-sts.openstreetmap
+
# Google postmaster tools verification
Caf323lytato5.openstreetmap:gv-o4v3qh5pfayqex.dv.googlehosted.com
+shenron.openstreetmap:212.110.172.32
+mail.openstreetmap:212.110.172.32
++mta-sts.openstreetmap:212.110.172.32
+lists.openstreetmap:212.110.172.32
+svn.openstreetmap:212.110.172.32
+trac.openstreetmap:212.110.172.32
+vipertooth.openstreetmap:176.122.99.101
3vipertooth.openstreetmap:2001067c2d4000000000000000000065
+tuatara.openstreetmap:114.23.141.203
+3tuatara.openstreetmap:24061e00b4100c24529a4cfffe79bc3b
+waima.openstreetmap:103.197.61.160
+nidhogg.openstreetmap:130.236.254.221
3nidhogg.openstreetmap:200106b00017f0a000000000000000dd