Isn&#x27;t this still a draft? Also, it does not fix MX record spoofing, only downgrade attacks IIRC?<p>EDIT: Just reviewed the draft, seems like it addresses MX spoofing, but it seems to do it either via HTTPS or DNSSEC, so DNSSEC seems to be used by it