See our MTA-STS policy at /.well-known/mta-sts.txt