Validating an SMTP server

[Viktor Dukhovni]

On Mon, Sep 07, 2015 at 10:59:24PM +0200, Benny Pedersen wrote:

> openssl.net and openssl.net is still same ssl/tls, skip restriction on
> subdomains then ? (include cname mx check or not)
> 
> but if openssl.net and openssl.org make subdomain restriction ?
> 
> cname to another tls/ssl is worst, where i think cname to same tls/ssl is
> still ok

Sorry, no idea what you're saying.  Much too cryptic.

All I can say about openssl.net is that this domain is not DNSSEC
signed, so DANE is out of scope for openssl.net.  In any case, it
has neither MX records, nor A or AAAA records, so it receives no
email.

-- 
	Viktor.