Configuring MTA-STS and DNSSEC

[tomasz]

Hi folks,
so I think I got my MIAB working, including using my own SSL certificates, setting NS glue records pointing to my box so that the system checks look pretty.
Now there are two error/warnings being shown:

MTA-STS policy is missing: STSFetchResult.NONE
This domain’s DNSSEC DS record is not set.

Now that I am using the MIAB box as a DNS server, how should I configure both of them correctly?

For DNSSEC I suppose I have to contact my registrar, because once I have pointed the nameservers to my box all of the DNS configuration has been locked. So there is nothing I can configure on my own.

For MTA-STS I was under the impression that MIAB will already have all necessary DNS settings and a web server that would serve policy file. Is it maybe because my www subdomain are being server by another server? Is it necessary that www is being served by MIAB box?

Best regards
Tomasz

[KiekerJan]

@tomasz

For DNSSEC I suppose I have to contact my registrar

Correct. Like configuring the nameservers, DNSSEC is also something to be done at the registrar. You can find the needed info in the status check.

The MTA STS check will usually resolve itself after a night of daily checks.

[tomasz]

Thank you! I’ll contact the registrar.