distorted.lisp: Don't advertise Lets Encrypt certs for submission or IMAP.

[zones] / distorted.lisp

diff --git a/distorted.lisp b/distorted.lisp
index 59a3768eabd6c3037bf54bc728b55e89d7912d42..a03fa046ef3dee6f46b4efaaefb1d440ea3618bd 100644 (file)
--- a/distorted.lisp
+++ b/distorted.lisp
@@ -161,7 +161,7 @@ (defzone distorted.org.uk
                                      #p"https-stratocaster")))
   (www-cache :tlsa (3127 #1=(:trust-anchor-assertion
                             :certificate :sha-256 #p"distorted-ca")))
-  (mail :tlsa ((:submission :imap :imaps) #1# #3#))
+  (mail :tlsa ((:submission :imap :imaps) #1#))
   (mail :tlsa (:smtp
               #+view/inside #1#
               #-view/inside (:domain-issued-certificate