Editing 430.ch Reconnaissance Report (section)

==== Add MTA-STS and TLS-RPT ====

Finding:

* No MTA-STS or TLS-RPT records observed.

Recommended action:

Publish:

<pre>
_mta-sts.430.ch TXT "v=STSv1; id=YYYYMMDD01"
_smtp._tls.430.ch TXT "v=TLSRPTv1; rua=mailto:tlsrpt@430.ch"
</pre>

Serve an HTTPS policy at:

<pre>
https://mta-sts.430.ch/.well-known/mta-sts.txt
</pre>

Example policy:

<pre>
version: STSv1
mode: testing
mx: aspmx1.migadu.com
mx: aspmx2.migadu.com
max_age: 86400
</pre>

Move from <code>testing</code> to <code>enforce</code> after confirming reports are clean.