relay: send REQUIRETLS mail through relays #262

Merged

jcoffey-dev merged 1 commits from relay/outbound-requiretls into main

2026-10-30 17:08:30 +00:00

Author	SHA1	Message	Date
jcoffey-dev	fc2923fd48	relay: send REQUIRETLS mail through relays ci / fork-checks (pull_request) Skipped Details ci / build (pull_request) Skipped Details github/ci (branch) GitHub Actions Details ci / github (pull_request) Successful in 13m46s Details The downstream hands REQUIRETLS mail to a relay with the parameter instead of keeping it off relays. The relay treats it as the server's own delivery does: TLS required with a WebPKI certificate unless DANE applies, never retried in the clear, and REQUIRETLS passed on where the next server offers it. Its TLS failures report no-policy-found unless an MTA-STS policy applied.	2026-10-30 09:34:46 -07:00

Author

SHA1

Message

Date

jcoffey-dev

fc2923fd48

relay: send REQUIRETLS mail through relays

ci / fork-checks (pull_request) Skipped

Details

ci / build (pull_request) Skipped

Details

github/ci (branch) GitHub Actions

Details

ci / github (pull_request) Successful in 13m46s

Details

The downstream hands REQUIRETLS mail to a relay with the parameter
instead of keeping it off relays. The relay treats it as the server's
own delivery does: TLS required with a WebPKI certificate unless DANE
applies, never retried in the clear, and REQUIRETLS passed on where
the next server offers it. Its TLS failures report no-policy-found
unless an MTA-STS policy applied.

2026-10-30 09:34:46 -07:00