tls_policy

# http://www.cs-ware.de/blog/archives/175
#
# CC-by-sa
#
# members of email made in germany
email.de										secure match=.web.de
freenet.de										secure match=.freenet.de
gmx.at											secure match=.gmx.net
gmx.biz											secure match=.gmx.net
gmx.ch											secure match=.gmx.net
gmx.co.uk										secure match=.gmx.net
gmx.com											secure match=.gmx.net
gmx.com.my										secure match=.gmx.net
gmx.de											secure match=.gmx.net
gmx.es											secure match=.gmx.net
gmx.eu											secure match=.gmx.net
gmx.fr											secure match=.gmx.net
gmx.hk											secure match=.gmx.net
gmx.info										secure match=.gmx.net
gmx.it											secure match=.gmx.net
gmx.net											secure match=.gmx.net
gmx.org											secure match=.gmx.net
gmx.ph											secure match=.gmx.net
gmx.pt											secure match=.gmx.net
gmx.sg											secure match=.gmx.net
gmx.tm											secure match=.gmx.net
gmx.us											secure match=.gmx.net
online.de										secure match=.kundenserver.de
t-online.de										secure match=.t-online.de
web.de											secure match=.web.de
# other mail providers
126.com											secure match=.126.com
aol.asia										secure match=mx.aol.com:.mx.aol.com:.yahoodns.net:.mail.yahoo.com
aol.at											secure match=mx.aol.com:.mx.aol.com:.yahoodns.net:.mail.yahoo.com
aol.be											secure match=mx.aol.com:.mx.aol.com:.yahoodns.net:.mail.yahoo.com
aol.ch											secure match=mx.aol.com:.mx.aol.com:.yahoodns.net:.mail.yahoo.com
aol.cl											secure match=mx.aol.com:.mx.aol.com:.yahoodns.net:.mail.yahoo.com
aol.co.nz										secure match=mx.aol.com:.mx.aol.com:.yahoodns.net:.mail.yahoo.com
aol.co.uk										secure match=mx.aol.com:.mx.aol.com:.yahoodns.net:.mail.yahoo.com
aol.com											secure match=mx.aol.com:.mx.aol.com:.yahoodns.net:.mail.yahoo.com
aol.com.ar										secure match=mx.aol.com:.mx.aol.com:.yahoodns.net:.mail.yahoo.com
aol.com.au										secure match=mx.aol.com:.mx.aol.com:.yahoodns.net:.mail.yahoo.com
aol.com.br										secure match=mx.aol.com:.mx.aol.com:.yahoodns.net:.mail.yahoo.com
aol.com.co										secure match=mx.aol.com:.mx.aol.com:.yahoodns.net:.mail.yahoo.com
aol.com.mx										secure match=mx.aol.com:.mx.aol.com:.yahoodns.net:.mail.yahoo.com
aol.com.tr										secure match=mx.aol.com:.mx.aol.com:.yahoodns.net:.mail.yahoo.com
aol.com.ve										secure match=mx.aol.com:.mx.aol.com:.yahoodns.net:.mail.yahoo.com
aol.cz											secure match=mx.aol.com:.mx.aol.com:.yahoodns.net:.mail.yahoo.com
aol.de											secure match=mx.aol.com:.mx.aol.com:.yahoodns.net:.mail.yahoo.com
aol.dk											secure match=mx.aol.com:.mx.aol.com:.yahoodns.net:.mail.yahoo.com
aol.es											secure match=mx.aol.com:.mx.aol.com:.yahoodns.net:.mail.yahoo.com
aol.fi											secure match=mx.aol.com:.mx.aol.com:.yahoodns.net:.mail.yahoo.com
aol.fr											secure match=mx.aol.com:.mx.aol.com:.yahoodns.net:.mail.yahoo.com
aol.in											secure match=mx.aol.com:.mx.aol.com:.yahoodns.net:.mail.yahoo.com
aol.it											secure match=mx.aol.com:.mx.aol.com:.yahoodns.net:.mail.yahoo.com
aol.jp											secure match=mx.aol.com:.mx.aol.com:.yahoodns.net:.mail.yahoo.com
aol.nl											secure match=mx.aol.com:.mx.aol.com:.yahoodns.net:.mail.yahoo.com
aol.pl											secure match=mx.aol.com:.mx.aol.com:.yahoodns.net:.mail.yahoo.com
aol.se											secure match=mx.aol.com:.mx.aol.com:.yahoodns.net:.mail.yahoo.com
aol.tw											secure match=mx.aol.com:.mx.aol.com:.yahoodns.net:.mail.yahoo.com
arcor.de										secure match=.arcor.de:.oxcloud-vadesecure.net
gmail.com										secure match=.google.com
googlegroups.com								secure match=.google.com
googlemail.com									secure match=.google.com
google.com										secure match=.google.com
icloud.com										secure match=.mail.icloud.com
kabelmail.de									secure match=.xworks.net
mac.com											secure match=.mail.icloud.com
mail.de											secure match=.mail.de
mailbox.org										secure match=.mailbox.org
me.com											secure match=.mail.icloud.com
orange.fr										secure match=.orange.fr
posteo.de										secure match=.posteo.de
hotmail.at										secure match=.hotmail.com:.outlook.com
hotmail.be										secure match=.hotmail.com:.outlook.com
hotmail.ch										secure match=.hotmail.com:.outlook.com
hotmail.co.id									secure match=.hotmail.com:.outlook.com
hotmail.co.jp									secure match=.hotmail.com:.outlook.com
hotmail.co.kr									secure match=.hotmail.com:.outlook.com
hotmail.co.nz									secure match=.hotmail.com:.outlook.com
hotmail.co.th									secure match=.hotmail.com:.outlook.com
hotmail.co.uk									secure match=.hotmail.com:.outlook.com
hotmail.co.za									secure match=.hotmail.com:.outlook.com
hotmail.com										secure match=.hotmail.com:.outlook.com
hotmail.com.au									secure match=.hotmail.com:.outlook.com
hotmail.com.hk									secure match=.hotmail.com:.outlook.com
hotmail.com.tr									secure match=.hotmail.com:.outlook.com
hotmail.com.tw									secure match=.hotmail.com:.outlook.com
hotmail.com.vn									secure match=.hotmail.com:.outlook.com
hotmail.cz										secure match=.hotmail.com:.outlook.com
hotmail.de										secure match=.hotmail.com:.outlook.com
hotmail.dk										secure match=.hotmail.com:.outlook.com
hotmail.es										secure match=.hotmail.com:.outlook.com
hotmail.fi										secure match=.hotmail.com:.outlook.com
hotmail.fr										secure match=.hotmail.com:.outlook.com
hotmail.gr										secure match=.hotmail.com:.outlook.com
hotmail.it										secure match=.hotmail.com:.outlook.com
hotmail.my										secure match=.hotmail.com:.outlook.com
hotmail.nl										secure match=.hotmail.com:.outlook.com
hotmail.no										secure match=.hotmail.com:.outlook.com
hotmail.ph										secure match=.hotmail.com:.outlook.com
hotmail.rs										secure match=.hotmail.com:.outlook.com
hotmail.se										secure match=.hotmail.com:.outlook.com
hotmail.sg										secure match=.hotmail.com:.outlook.com
live.at											secure match=.hotmail.com:.outlook.com
live.be											secure match=.hotmail.com:.outlook.com
live.ca											secure match=.hotmail.com:.outlook.com
live.cl											secure match=.hotmail.com:.outlook.com
live.cn											secure match=.hotmail.com:.outlook.com
live.co.kr										secure match=.hotmail.com:.outlook.com
live.co.uk										secure match=.hotmail.com:.outlook.com
live.co.za										secure match=.hotmail.com:.outlook.com
live.com										secure match=.hotmail.com:.outlook.com
live.com.ar										secure match=.hotmail.com:.outlook.com
live.com.au										secure match=.hotmail.com:.outlook.com
live.com.mx										secure match=.hotmail.com:.outlook.com
live.com.my										secure match=.hotmail.com:.outlook.com
live.com.ph										secure match=.hotmail.com:.outlook.com
live.com.pt										secure match=.hotmail.com:.outlook.com
live.com.sg										secure match=.hotmail.com:.outlook.com
live.de											secure match=.hotmail.com:.outlook.com
live.dk											secure match=.hotmail.com:.outlook.com
live.fr											secure match=.hotmail.com:.outlook.com
live.hk											secure match=.hotmail.com:.outlook.com
live.ie											secure match=.hotmail.com:.outlook.com
live.in											secure match=.hotmail.com:.outlook.com
live.it											secure match=.hotmail.com:.outlook.com
live.jp											secure match=.hotmail.com:.outlook.com
live.nl											secure match=.hotmail.com:.outlook.com
live.no											secure match=.hotmail.com:.outlook.com
live.ru											secure match=.hotmail.com:.outlook.com
live.se											secure match=.hotmail.com:.outlook.com
livemail.tw										secure match=.hotmail.com:.outlook.com
msn.cn											secure match=.hotmail.com:.outlook.com
netcologne.de									secure match=.netcologne.de
outlook.at										secure match=.hotmail.com:.outlook.com
outlook.be										secure match=.hotmail.com:.outlook.com
outlook.com										secure match=.hotmail.com:.outlook.com
outlook.com.au									secure match=.hotmail.com:.outlook.com
outlook.com.tr									secure match=.hotmail.com:.outlook.com
outlook.co.id									secure match=.hotmail.com:.outlook.com
outlook.co.jp									secure match=.hotmail.com:.outlook.com
outlook.co.nz									secure match=.hotmail.com:.outlook.com
outlook.co.th									secure match=.hotmail.com:.outlook.com
outlook.cz										secure match=.hotmail.com:.outlook.com
outlook.de										secure match=.hotmail.com:.outlook.com
outlook.dk										secure match=.hotmail.com:.outlook.com
outlook.es										secure match=.hotmail.com:.outlook.com
outlook.fr										secure match=.hotmail.com:.outlook.com
outlook.it										secure match=.hotmail.com:.outlook.com
outlook.my										secure match=.hotmail.com:.outlook.com
outlook.ph										secure match=.hotmail.com:.outlook.com
outlook.sg										secure match=.hotmail.com:.outlook.com
unitymedia.de									secure match=.unitymedia.de
windowslive.com									secure match=.hotmail.com:.outlook.com
vodafone.de										secure match=.vodafone.de:.oxcloud-vadesecure.net
yahoo.at										secure match=.yahoodns.net
yahoo.be										secure match=.yahoodns.net
yahoo.ca										secure match=.yahoodns.net
yahoo.co.id										secure match=.yahoodns.net
yahoo.co.il										secure match=.yahoodns.net
yahoo.co.in										secure match=.yahoodns.net
yahoo.co.jp										may
yahoo.co.nz										secure match=.yahoodns.net
yahoo.co.th										secure match=.yahoodns.net
yahoo.co.uk										secure match=.yahoodns.net
yahoo.co.za										secure match=.yahoodns.net
yahoo.com										secure match=.yahoodns.net
yahoo.com.ar									secure match=.yahoodns.net
yahoo.com.br									secure match=.yahoodns.net
yahoo.com.co									secure match=.yahoodns.net
yahoo.com.hk									secure match=.yahoodns.net
yahoo.com.my									secure match=.yahoodns.net
yahoo.com.ph									secure match=.yahoodns.net
yahoo.com.sg									secure match=.yahoodns.net
yahoo.com.tr									secure match=.yahoodns.net
yahoo.com.tw									secure match=.yahoodns.net
yahoo.com.vn									secure match=.yahoodns.net
yahoo.cz										secure match=.yahoodns.net
yahoo.de										secure match=.yahoodns.net
yahoo.dk										secure match=.yahoodns.net
yahoo.es										secure match=.yahoodns.net
yahoo.fi										secure match=.yahoodns.net
yahoo.fr										secure match=.yahoodns.net
yahoo.gr										secure match=.yahoodns.net
yahoo.hu										secure match=.yahoodns.net
yahoo.ie										secure match=.yahoodns.net
yahoo.in										secure match=.yahoodns.net
yahoo.it										secure match=.yahoodns.net
yahoo.nl										secure match=.yahoodns.net
yahoo.no										secure match=.yahoodns.net
yahoo.pl										secure match=.yahoodns.net
yahoo.pt										secure match=.yahoodns.net
yahoo.ro										secure match=.yahoodns.net
yahoo.se										secure match=.yahoodns.net
ymail.com										secure match=.yahoodns.net
yandex.ru										secure match=mx.yandex.net:mx.yandex.ru
# universities
informatik.hu-berlin.de							secure match=.hu-berlin.de
hu-berlin.de									secure match=.hu-berlin.de
ostfalia.de										secure match=.sonia.de
fh-hannover.de									secure match=.fh-hannover.de:.hs-hannover.de
hs-hannover.de									secure match=.fh-hannover.de:.hs-hannover.de
uos.de											encrypt
uni-osnabrueck.de								encrypt
.tu-clausthal.de								secure match=.mx.srv.dfn.de:.tu-clausthal.de
# states of germany
# .bayern.de: mx has selfsigned cert
.bayern.de										encrypt
.berlin.de										encrypt
.hessen.de										secure match=.hessen.de
.niedersachsen.de								secure match=.niedersachsen.de
# banks
commerzbank.com									secure match=.commerzbank.com
postbank.de										secure match=.postbank.de
paypal.de										secure match=.paypalcorp.com
paypal.com										secure match=.paypalcorp.com
# insurances
.aok.de											secure match=.aok.de
barmer-gek.de									secure match=.t-systems.com
tk.de											secure match=.tk.de
# others
bfr.bund.de										encrypt
bmwi.bund.de									encrypt
bsi.bund.de										encrypt
bmg.bund.de										encrypt
bkm.bmi.bund.de									encrypt
bmub.bund.de									encrypt
bmvbs.bund.de									encrypt
bamf.bund.de									encrypt
bfdi.bund.de									encrypt
polizei.bund.de									encrypt
bakoev.bund.de									encrypt
bdbos.bund.de									encrypt
bverwg.bund.de									encrypt
bmas.bund.de									encrypt
bmfsfj.bund.de									encrypt
bafza.bund.de									encrypt
bzst.bund.de									encrypt
badv.bund.de									encrypt
ti.bund.de										secure match=.mx.srv.dfn.de:.bund.de
wsv.bund.de										encrypt
barch.bund.de									encrypt
bstu.bund.de									encrypt
bund.de											encrypt
bundestag.de									secure match=.dbtg.de
# bundeswehr.org: one mx has a selfsigned cert
bundeswehr.org									secure match=.bwehr.de
.debian.org										encrypt
.torproject.org									encrypt
heise.de										secure match=.heise.de
reply.github.com								secure match=.github.com
github.com										secure match=.google.com
gitlab.com										secure match=.google.com