That doesn&#x27;t bring a lot of extra security though, because there&#x27;s no name verification. I can get a valid letsencrypt cert on anyrandomdomain.com, and if I can hijack your MX and point at it, it&#x27;s &quot;valid&quot;.