{"action":"created","comment":{"url":"https://api.github.com/repos/mrisher/smtp-sts/pulls/comments/139641753","pull_request_review_id":63600754,"id":139641753,"diff_hunk":"@@ -480,6 +480,40 @@ Recipients should also prefer to update the HTTPS policy body before updating\n the TXT record; this ordering avoids the risk that senders, seeing a new TXT\n record, mistakenly cache the old policy from HTTPS.\n \n+## Policy Delegation\n+\n+Domain owners commonly delegate SMTP hosting to a different organization, such\n+as an ISP or a Web host. In such a case, they may wish to also delegate the\n+MTA-STS policy to the same organization which can be accomplished with two\n+changes.\n+\n+First, the Policy Domain must point the `_mta-sts` record, via CNAME, to\n+the `_mta-sts` record maintained by the hosting organization. This allows the\n+hosting organization to control update signaling.\n+\n+Second, the Policy Domain must point the \"well-known\" policy location to the\n+hosting organization. This can be done either by redirecting the `mta-sts` host to a\n+host or CNAME specified by the hosting organization and by giving the hosting\n+organization a TLS certificate which is valid for that host, or by setting up a","path":"mta-sts.md","position":18,"original_position":18,"commit_id":"c777873d505b46b1b58383c88f23864df8c436b2","original_commit_id":"c777873d505b46b1b58383c88f23864df8c436b2","user":{"login":"danmarg","id":1929099,"avatar_url":"https://avatars1.githubusercontent.com/u/1929099?v=4","gravatar_id":"","url":"https://api.github.com/users/danmarg","html_url":"https://github.com/danmarg","followers_url":"https://api.github.com/users/danmarg/followers","following_url":"https://api.github.com/users/danmarg/following{/other_user}","gists_url":"https://api.github.com/users/danmarg/gists{/gist_id}","starred_url":"https://api.github.com/users/danmarg/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/danmarg/subscriptions","organizations_url":"https://api.github.com/users/danmarg/orgs","repos_url":"https://api.github.com/users/danmarg/repos","events_url":"https://api.github.com/users/danmarg/events{/privacy}","received_events_url":"https://api.github.com/users/danmarg/received_events","type":"User","site_admin":false},"body":"It's actually interesting that you can (I think) do a few different things herE:\r\n\r\n1. Make mta-sts a CNAME to a host specified by the hosting org. Probably easiest. \r\n2. Create an mta-sts subdomain with NS pointed to those provided by the hosting org. This works, since you can have an apex record that's an A or CNAME, but I don't know why you'd bother.\r\n\r\nFor clarity I'm suggesting option 1, but either works. ","created_at":"2017-09-19T09:32:26Z","updated_at":"2017-09-19T09:32:26Z","html_url":"https://github.com/mrisher/smtp-sts/pull/189#discussion_r139641753","pull_request_url":"https://api.github.com/repos/mrisher/smtp-sts/pulls/189","author_association":"COLLABORATOR","_links":{"self":{"href":"https://api.github.com/repos/mrisher/smtp-sts/pulls/comments/139641753"},"html":{"href":"https://github.com/mrisher/smtp-sts/pull/189#discussion_r139641753"},"pull_request":{"href":"https://api.github.com/repos/mrisher/smtp-sts/pulls/189"}},"in_reply_to_id":139489240},"pull_request":{"url":"https://api.github.com/repos/mrisher/smtp-sts/pulls/189","id":141492523,"html_url":"https://github.com/mrisher/smtp-sts/pull/189","diff_url":"https://github.com/mrisher/smtp-sts/pull/189.diff","patch_url":"https://github.com/mrisher/smtp-sts/pull/189.patch","issue_url":"https://api.github.com/repos/mrisher/smtp-sts/issues/189","number":189,"state":"open","locked":false,"title":"\"Operational Considerations\" section on how to do policy delegation","user":{"login":"danmarg","id":1929099,"avatar_url":"https://avatars1.githubusercontent.com/u/1929099?v=4","gravatar_id":"","url":"https://api.github.com/users/danmarg","html_url":"https://github.com/danmarg","followers_url":"https://api.github.com/users/danmarg/followers","following_url":"https://api.github.com/users/danmarg/following{/other_user}","gists_url":"https://api.github.com/users/danmarg/gists{/gist_id}","starred_url":"https://api.github.com/users/danmarg/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/danmarg/subscriptions","organizations_url":"https://api.github.com/users/danmarg/orgs","repos_url":"https://api.github.com/users/danmarg/repos","events_url":"https://api.github.com/users/danmarg/events{/privacy}","received_events_url":"https://api.github.com/users/danmarg/received_events","type":"User","site_admin":false},"body":"","created_at":"2017-09-17T16:22:55Z","updated_at":"2017-09-19T09:32:26Z","closed_at":null,"merged_at":null,"merge_commit_sha":"71702859924c1202c01b375d67cf93db2078dd2a","assignee":null,"assignees":[],"requested_reviewers":[],"milestone":null,"commits_url":"https://api.github.com/repos/mrisher/smtp-sts/pulls/189/commits","review_comments_url":"https://api.github.com/repos/mrisher/smtp-sts/pulls/189/comments","review_comment_url":"https://api.github.com/repos/mrisher/smtp-sts/pulls/comments{/number}","comments_url":"https://api.github.com/repos/mrisher/smtp-sts/issues/189/comments","statuses_url":"https://api.github.com/repos/mrisher/smtp-sts/statuses/c777873d505b46b1b58383c88f23864df8c436b2","head":{"label":"mrisher:delegation-1","ref":"delegation-1","sha":"c777873d505b46b1b58383c88f23864df8c436b2","user":{"login":"mrisher","id":218038,"avatar_url":"https://avatars3.githubusercontent.com/u/218038?v=4","gravatar_id":"","url":"https://api.github.com/users/mrisher","html_url":"https://github.com/mrisher","followers_url":"https://api.github.com/users/mrisher/followers","following_url":"https://api.github.com/users/mrisher/following{/other_user}","gists_url":"https://api.github.com/users/mrisher/gists{/gist_id}","starred_url":"https://api.github.com/users/mrisher/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mrisher/subscriptions","organizations_url":"https://api.github.com/users/mrisher/orgs","repos_url":"https://api.github.com/users/mrisher/repos","events_url":"https://api.github.com/users/mrisher/events{/privacy}","received_events_url":"https://api.github.com/users/mrisher/received_events","type":"User","site_admin":false},"repo":{"id":44577417,"name":"smtp-sts","full_name":"mrisher/smtp-sts","owner":{"login":"mrisher","id":218038,"avatar_url":"https://avatars3.githubusercontent.com/u/218038?v=4","gravatar_id":"","url":"https://api.github.com/users/mrisher","html_url":"https://github.com/mrisher","followers_url":"https://api.github.com/users/mrisher/followers","following_url":"https://api.github.com/users/mrisher/following{/other_user}","gists_url":"https://api.github.com/users/mrisher/gists{/gist_id}","starred_url":"https://api.github.com/users/mrisher/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mrisher/subscriptions","organizations_url":"https://api.github.com/users/mrisher/orgs","repos_url":"https://api.github.com/users/mrisher/repos","events_url":"https://api.github.com/users/mrisher/events{/privacy}","received_events_url":"https://api.github.com/users/mrisher/received_events","type":"User","site_admin":false},"private":false,"html_url":"https://github.com/mrisher/smtp-sts","description":"SMTP Strict Transport Security","fork":false,"url":"https://api.github.com/repos/mrisher/smtp-sts","forks_url":"https://api.github.com/repos/mrisher/smtp-sts/forks","keys_url":"https://api.github.com/repos/mrisher/smtp-sts/keys{/key_id}","collaborators_url":"https://api.github.com/repos/mrisher/smtp-sts/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/mrisher/smtp-sts/teams","hooks_url":"https://api.github.com/repos/mrisher/smtp-sts/hooks","issue_events_url":"https://api.github.com/repos/mrisher/smtp-sts/issues/events{/number}","events_url":"https://api.github.com/repos/mrisher/smtp-sts/events","assignees_url":"https://api.github.com/repos/mrisher/smtp-sts/assignees{/user}","branches_url":"https://api.github.com/repos/mrisher/smtp-sts/branches{/branch}","tags_url":"https://api.github.com/repos/mrisher/smtp-sts/tags","blobs_url":"https://api.github.com/repos/mrisher/smtp-sts/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/mrisher/smtp-sts/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/mrisher/smtp-sts/git/refs{/sha}","trees_url":"https://api.github.com/repos/mrisher/smtp-sts/git/trees{/sha}","statuses_url":"https://api.github.com/repos/mrisher/smtp-sts/statuses/{sha}","languages_url":"https://api.github.com/repos/mrisher/smtp-sts/languages","stargazers_url":"https://api.github.com/repos/mrisher/smtp-sts/stargazers","contributors_url":"https://api.github.com/repos/mrisher/smtp-sts/contributors","subscribers_url":"https://api.github.com/repos/mrisher/smtp-sts/subscribers","subscription_url":"https://api.github.com/repos/mrisher/smtp-sts/subscription","commits_url":"https://api.github.com/repos/mrisher/smtp-sts/commits{/sha}","git_commits_url":"https://api.github.com/repos/mrisher/smtp-sts/git/commits{/sha}","comments_url":"https://api.github.com/repos/mrisher/smtp-sts/comments{/number}","issue_comment_url":"https://api.github.com/repos/mrisher/smtp-sts/issues/comments{/number}","contents_url":"https://api.github.com/repos/mrisher/smtp-sts/contents/{+path}","compare_url":"https://api.github.com/repos/mrisher/smtp-sts/compare/{base}...{head}","merges_url":"https://api.github.com/repos/mrisher/smtp-sts/merges","archive_url":"https://api.github.com/repos/mrisher/smtp-sts/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/mrisher/smtp-sts/downloads","issues_url":"https://api.github.com/repos/mrisher/smtp-sts/issues{/number}","pulls_url":"https://api.github.com/repos/mrisher/smtp-sts/pulls{/number}","milestones_url":"https://api.github.com/repos/mrisher/smtp-sts/milestones{/number}","notifications_url":"https://api.github.com/repos/mrisher/smtp-sts/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/mrisher/smtp-sts/labels{/name}","releases_url":"https://api.github.com/repos/mrisher/smtp-sts/releases{/id}","deployments_url":"https://api.github.com/repos/mrisher/smtp-sts/deployments","created_at":"2015-10-20T02:34:26Z","updated_at":"2017-05-16T05:01:32Z","pushed_at":"2017-09-17T16:22:55Z","git_url":"git://github.com/mrisher/smtp-sts.git","ssh_url":"git@github.com:mrisher/smtp-sts.git","clone_url":"https://github.com/mrisher/smtp-sts.git","svn_url":"https://github.com/mrisher/smtp-sts","homepage":null,"size":1083,"stargazers_count":25,"watchers_count":25,"language":"Makefile","has_issues":true,"has_projects":true,"has_downloads":true,"has_wiki":true,"has_pages":false,"forks_count":14,"mirror_url":null,"open_issues_count":12,"forks":14,"open_issues":12,"watchers":25,"default_branch":"master"}},"base":{"label":"mrisher:master","ref":"master","sha":"58d76247e936613fab6cab3ba4da2922774880bc","user":{"login":"mrisher","id":218038,"avatar_url":"https://avatars3.githubusercontent.com/u/218038?v=4","gravatar_id":"","url":"https://api.github.com/users/mrisher","html_url":"https://github.com/mrisher","followers_url":"https://api.github.com/users/mrisher/followers","following_url":"https://api.github.com/users/mrisher/following{/other_user}","gists_url":"https://api.github.com/users/mrisher/gists{/gist_id}","starred_url":"https://api.github.com/users/mrisher/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mrisher/subscriptions","organizations_url":"https://api.github.com/users/mrisher/orgs","repos_url":"https://api.github.com/users/mrisher/repos","events_url":"https://api.github.com/users/mrisher/events{/privacy}","received_events_url":"https://api.github.com/users/mrisher/received_events","type":"User","site_admin":false},"repo":{"id":44577417,"name":"smtp-sts","full_name":"mrisher/smtp-sts","owner":{"login":"mrisher","id":218038,"avatar_url":"https://avatars3.githubusercontent.com/u/218038?v=4","gravatar_id":"","url":"https://api.github.com/users/mrisher","html_url":"https://github.com/mrisher","followers_url":"https://api.github.com/users/mrisher/followers","following_url":"https://api.github.com/users/mrisher/following{/other_user}","gists_url":"https://api.github.com/users/mrisher/gists{/gist_id}","starred_url":"https://api.github.com/users/mrisher/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mrisher/subscriptions","organizations_url":"https://api.github.com/users/mrisher/orgs","repos_url":"https://api.github.com/users/mrisher/repos","events_url":"https://api.github.com/users/mrisher/events{/privacy}","received_events_url":"https://api.github.com/users/mrisher/received_events","type":"User","site_admin":false},"private":false,"html_url":"https://github.com/mrisher/smtp-sts","description":"SMTP Strict Transport Security","fork":false,"url":"https://api.github.com/repos/mrisher/smtp-sts","forks_url":"https://api.github.com/repos/mrisher/smtp-sts/forks","keys_url":"https://api.github.com/repos/mrisher/smtp-sts/keys{/key_id}","collaborators_url":"https://api.github.com/repos/mrisher/smtp-sts/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/mrisher/smtp-sts/teams","hooks_url":"https://api.github.com/repos/mrisher/smtp-sts/hooks","issue_events_url":"https://api.github.com/repos/mrisher/smtp-sts/issues/events{/number}","events_url":"https://api.github.com/repos/mrisher/smtp-sts/events","assignees_url":"https://api.github.com/repos/mrisher/smtp-sts/assignees{/user}","branches_url":"https://api.github.com/repos/mrisher/smtp-sts/branches{/branch}","tags_url":"https://api.github.com/repos/mrisher/smtp-sts/tags","blobs_url":"https://api.github.com/repos/mrisher/smtp-sts/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/mrisher/smtp-sts/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/mrisher/smtp-sts/git/refs{/sha}","trees_url":"https://api.github.com/repos/mrisher/smtp-sts/git/trees{/sha}","statuses_url":"https://api.github.com/repos/mrisher/smtp-sts/statuses/{sha}","languages_url":"https://api.github.com/repos/mrisher/smtp-sts/languages","stargazers_url":"https://api.github.com/repos/mrisher/smtp-sts/stargazers","contributors_url":"https://api.github.com/repos/mrisher/smtp-sts/contributors","subscribers_url":"https://api.github.com/repos/mrisher/smtp-sts/subscribers","subscription_url":"https://api.github.com/repos/mrisher/smtp-sts/subscription","commits_url":"https://api.github.com/repos/mrisher/smtp-sts/commits{/sha}","git_commits_url":"https://api.github.com/repos/mrisher/smtp-sts/git/commits{/sha}","comments_url":"https://api.github.com/repos/mrisher/smtp-sts/comments{/number}","issue_comment_url":"https://api.github.com/repos/mrisher/smtp-sts/issues/comments{/number}","contents_url":"https://api.github.com/repos/mrisher/smtp-sts/contents/{+path}","compare_url":"https://api.github.com/repos/mrisher/smtp-sts/compare/{base}...{head}","merges_url":"https://api.github.com/repos/mrisher/smtp-sts/merges","archive_url":"https://api.github.com/repos/mrisher/smtp-sts/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/mrisher/smtp-sts/downloads","issues_url":"https://api.github.com/repos/mrisher/smtp-sts/issues{/number}","pulls_url":"https://api.github.com/repos/mrisher/smtp-sts/pulls{/number}","milestones_url":"https://api.github.com/repos/mrisher/smtp-sts/milestones{/number}","notifications_url":"https://api.github.com/repos/mrisher/smtp-sts/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/mrisher/smtp-sts/labels{/name}","releases_url":"https://api.github.com/repos/mrisher/smtp-sts/releases{/id}","deployments_url":"https://api.github.com/repos/mrisher/smtp-sts/deployments","created_at":"2015-10-20T02:34:26Z","updated_at":"2017-05-16T05:01:32Z","pushed_at":"2017-09-17T16:22:55Z","git_url":"git://github.com/mrisher/smtp-sts.git","ssh_url":"git@github.com:mrisher/smtp-sts.git","clone_url":"https://github.com/mrisher/smtp-sts.git","svn_url":"https://github.com/mrisher/smtp-sts","homepage":null,"size":1083,"stargazers_count":25,"watchers_count":25,"language":"Makefile","has_issues":true,"has_projects":true,"has_downloads":true,"has_wiki":true,"has_pages":false,"forks_count":14,"mirror_url":null,"open_issues_count":12,"forks":14,"open_issues":12,"watchers":25,"default_branch":"master"}},"_links":{"self":{"href":"https://api.github.com/repos/mrisher/smtp-sts/pulls/189"},"html":{"href":"https://github.com/mrisher/smtp-sts/pull/189"},"issue":{"href":"https://api.github.com/repos/mrisher/smtp-sts/issues/189"},"comments":{"href":"https://api.github.com/repos/mrisher/smtp-sts/issues/189/comments"},"review_comments":{"href":"https://api.github.com/repos/mrisher/smtp-sts/pulls/189/comments"},"review_comment":{"href":"https://api.github.com/repos/mrisher/smtp-sts/pulls/comments{/number}"},"commits":{"href":"https://api.github.com/repos/mrisher/smtp-sts/pulls/189/commits"},"statuses":{"href":"https://api.github.com/repos/mrisher/smtp-sts/statuses/c777873d505b46b1b58383c88f23864df8c436b2"}},"author_association":"COLLABORATOR"}}
{"actor":{"display_login":"danmarg"}}