Please drop TLSA records matching retired Let's Encrypt CAs

[Benny Pedersen]

On 2021-09-30 17:30, Viktor Dukhovni wrote:
> The DANE survey continues to observe a "long tail" of MX hosts with 
> TLSA
> records that match the retired "X3" and/or "X4" Let's Encrypt issuer 
> Cas.

X-Spamd-Bar: /
Authentication-Results: mail.sys4.de;
	none
X-Rspamd-Server: echo
X-Rspamd-Queue-Id: 4HKxyj0s1fz1fv9
X-Spamd-Result: default: False [0.00 / 6.00];
	 TAGGED_RCPT(0.00)[dane-users,lists,dane-sys4,ml.dane-users]
X-Spam: Yes

why would it not be removed that header when recipient is not local ? :)

hope rspamd developpers can fix this