mirror
/
FairEmail
mirror of https://github.com/M66B/FairEmail.git
1
0
Fork 0
Code Issues Releases Wiki Activity

Updated FAQ

This commit is contained in:
M66B 2024-01-07 08:02:39 +01:00
parent 16a08b5216
commit 0efc7188bd
2 changed files with 13 additions and 13 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
FAQ.md
View File

@ -413,7 +413,7 @@ Anything on this list is in random order and *might* be added in the near future
* [(199) Can you add proxy support?](#faq199)
* [(200) How can I use Adguard to remove tracking parameters?](#faq200)
* [(201) What is certificate transparency?](#faq201)
* [(202) What is DANE?](#faq202)
* [(202) What is DNSSEC and what is DANE?](#faq202)
[I have another question.](#get-support)
@ -5674,18 +5674,18 @@ FairEmail uses [this library](https://github.com/appmattus/certificatetransparen
<br>
<a name="faq202"></a>
**(202) What is DANE?**
**(202) What is DNSSEC and what is DANE?**
Please see [this Wikipedia article](https://en.wikipedia.org/wiki/Domain_Name_System_Security_Extensions) about what DNSSEC is.
Please see [this article](https://github.com/internetstandards/toolbox-wiki/blob/main/DANE-for-SMTP-how-to.md) about what DANE is.
Alternatively, see [this Wikipedia article](https://en.wikipedia.org/wiki/DNS-based_Authentication_of_Named_Entities).
You can use [this tool](https://ssl-tools.net/tlsa-generator) to generate TSLA DNS records.
You can use [this tool](https://ssl-tools.net/tlsa-generator) to generate TSLA DNS records for DANE.
You can enable enforcing DANA in the (advanced) account and identity settings (since version 1.2148).
You can enable enforcing DNSSEC and/or DANA in the (advanced) account and identity settings (since version 1.2148).
Note that only some email servers support DANE and that only a limited number of DNS servers support DNSSEC, which is required for DANE.
Except for DANE, FairEmail won't enforce DNSSEC because adoption of DNSSEC is still limited (~30% at the start of 2024).
Note that only some email providers support DANE and that only a limited number of DNS servers support DNSSEC (January 2024: ~30%), which is required for DANE.
<br>

12
index.html
View File

@ -366,7 +366,7 @@
<li><a href="#faq199">(199) Can you add proxy support?</a></li>
<li><a href="#faq200">(200) How can I use Adguard to remove tracking parameters?</a></li>
<li><a href="#faq201">(201) What is certificate transparency?</a></li>
<li><a href="#faq202">(202) What is DANE?</a></li>
<li><a href="#faq202">(202) What is DNSSEC and what is DANE?</a></li>
</ul>
<p><a href="#get-support">I have another question.</a></p>
<p><a name="faq1"></a> <strong>(1) Which permissions are needed and why?</strong></p>
@ -2775,12 +2775,12 @@ adb install /path/to/FairEmail-xxx.apk</code></pre>
<p>When certificate transparency is enabled in the connection-settings tab page of the app, the <a href="https://github.com/GoogleChrome/CertificateTransparency/blob/master/ct_policy.md">Chrome Certificate Transparency Policy</a> will be applied.</p>
<p>FairEmail uses <a href="https://github.com/appmattus/certificatetransparency">this library</a> to implement certificate transparency via a custom trust manager.</p>
<p><br></p>
<p><a name="faq202"></a> <strong>(202) What is DANE?</strong></p>
<p><a name="faq202"></a> <strong>(202) What is DNSSEC and what is DANE?</strong></p>
<p>Please see <a href="https://en.wikipedia.org/wiki/Domain_Name_System_Security_Extensions">this Wikipedia article</a> about what DNSSEC is.</p>
<p>Please see <a href="https://github.com/internetstandards/toolbox-wiki/blob/main/DANE-for-SMTP-how-to.md">this article</a> about what DANE is. Alternatively, see <a href="https://en.wikipedia.org/wiki/DNS-based_Authentication_of_Named_Entities">this Wikipedia article</a>.</p>
<p>You can use <a href="https://ssl-tools.net/tlsa-generator">this tool</a> to generate TSLA DNS records.</p>
<p>You can enable enforcing DANA in the (advanced) account and identity settings (since version 1.2148).</p>
<p>Note that only some email servers support DANE and that only a limited number of DNS servers support DNSSEC, which is required for DANE.</p>
<p>Except for DANE, FairEmail won’t enforce DNSSEC because adoption of DNSSEC is still limited (~30% at the start of 2024).</p>
<p>You can use <a href="https://ssl-tools.net/tlsa-generator">this tool</a> to generate TSLA DNS records for DANE.</p>
<p>You can enable enforcing DNSSEC and/or DANA in the (advanced) account and identity settings (since version 1.2148).</p>
<p>Note that only some email providers support DANE and that only a limited number of DNS servers support DNSSEC (January 2024: ~30%), which is required for DANE.</p>
<p><br></p>
<h2>
<a name="get-support"></a>Get support