diff --git a/core/admin/mailu/models.py b/core/admin/mailu/models.py
index 6b0791ad..86e285d0 100644
--- a/core/admin/mailu/models.py
+++ b/core/admin/mailu/models.py
@@ -265,7 +265,7 @@ class Domain(Base):
     def dns_tlsa(self):
         """ return TLSA record for domain when using letsencrypt """
         hostname = app.config['HOSTNAME']
-        if True: #app.config['TLS_FLAVOR'] in ('letsencrypt', 'mail-letsencrypt'):
+        if app.config['TLS_FLAVOR'] in ('letsencrypt', 'mail-letsencrypt'):
             # current ISRG Root X1 (RSA 4096, O = Internet Security Research Group, CN = ISRG Root X1) @20210902
             return f'_25._tcp.{hostname}. 600 IN TLSA 2 1 1 0b9fa5a59eed715c26c1020c711b4f6ec42d58b0015e14337a39dad301c5afc3'