BIMI logo for the rifd.app mail domains.
MTA-STS policy for mail.rifd.app: mode: none. The name is send-only
(null MX, RFC 7505), so no sending MTA should enforce MTA-STS for it. The record at
_mta-sts.mail.rifd.app replaces SNDR's invalid id and keeps the policy fetchable for
any resolver that still has the old record cached.
The MTA-STS policy for rifd.app is served from
mta-sts.rifd.app.
