# Hard Coded Real Estate Mail Security

Canonical site: https://www.hardcodedrealestate.com
Last updated: 2026-07-20

## Current Published Files

- MTA-STS policy: https://www.hardcodedrealestate.com/.well-known/mta-sts.txt
- Root MTA-STS mirror: https://www.hardcodedrealestate.com/mta-sts.txt
- BIMI logo: https://www.hardcodedrealestate.com/bimi.svg
- Security contact: https://www.hardcodedrealestate.com/.well-known/security.txt

## Current Posture

The public MTA-STS policy is intentionally set to `mode: none` because this domain does not currently publish MX records. Move to `mode: testing`, then `mode: enforce`, only after the final mail provider and MX hostnames are live.

## Cloudflare DNS Records To Configure

Use real mailbox destinations for DMARC, TLS reporting, and security contact routing.

_mta-sts.hardcodedrealestate.com TXT "v=STSv1; id=2026071601"
_smtp._tls.hardcodedrealestate.com TXT "v=TLSRPTv1; rua=mailto:tls-rpt@hardcodedrealestate.com"
default._bimi.hardcodedrealestate.com TXT "v=BIMI1; l=https://www.hardcodedrealestate.com/bimi.svg"
_dmarc.hardcodedrealestate.com TXT "v=DMARC1; p=none; rua=mailto:dmarc@hardcodedrealestate.com; ruf=mailto:dmarc@hardcodedrealestate.com; fo=1; adkim=s; aspf=s; pct=100"

When mail is configured, also publish SPF and DKIM records from the selected mail provider. After successful monitoring, DMARC can move from `p=none` to `p=quarantine`, then `p=reject`.