Does Kumo recognize TLS certs for wildcard domains

get-help
21

opensrs provides mailbox accounts for mail providers

22

and that’s how they’re doing it… i have a ticket open with them about this

23

what I suggest in the meantime is that you disable the use of TLS for that domain

24

yes, i did that… set it to be OpportunisticInsecure for that domain

25

@free-spirited-yorksh Did you have thoughts on making Opportunistic default to Insecure, and have OpportunisticSecure as an option?

26

Yes; I strongly believe that insecure should never ever be the default.

27

you are of course welcome to set the default for your deployment to insecure if you prefer that

28

My testing has all been with a single subdomain and not CNAMED.
IE: mta1.kumomta.com
I can put some more extensive testing. on my “todo” list.