From 0efc7188bdf2a9708945ca5f1cbc7c01e28930b0 Mon Sep 17 00:00:00 2001 From: M66B Date: Sun, 7 Jan 2024 08:02:39 +0100 Subject: [PATCH] Updated FAQ --- FAQ.md | 14 +++++++------- index.html | 12 ++++++------ 2 files changed, 13 insertions(+), 13 deletions(-) diff --git a/FAQ.md b/FAQ.md index da0ac2c06c..8eeec30f09 100644 --- a/FAQ.md +++ b/FAQ.md @@ -413,7 +413,7 @@ Anything on this list is in random order and *might* be added in the near future * [(199) Can you add proxy support?](#faq199) * [(200) How can I use Adguard to remove tracking parameters?](#faq200) * [(201) What is certificate transparency?](#faq201) -* [(202) What is DANE?](#faq202) +* [(202) What is DNSSEC and what is DANE?](#faq202) [I have another question.](#get-support) @@ -5674,18 +5674,18 @@ FairEmail uses [this library](https://github.com/appmattus/certificatetransparen
-**(202) What is DANE?** +**(202) What is DNSSEC and what is DANE?** + +Please see [this Wikipedia article](https://en.wikipedia.org/wiki/Domain_Name_System_Security_Extensions) about what DNSSEC is. Please see [this article](https://github.com/internetstandards/toolbox-wiki/blob/main/DANE-for-SMTP-how-to.md) about what DANE is. Alternatively, see [this Wikipedia article](https://en.wikipedia.org/wiki/DNS-based_Authentication_of_Named_Entities). -You can use [this tool](https://ssl-tools.net/tlsa-generator) to generate TSLA DNS records. +You can use [this tool](https://ssl-tools.net/tlsa-generator) to generate TSLA DNS records for DANE. -You can enable enforcing DANA in the (advanced) account and identity settings (since version 1.2148). +You can enable enforcing DNSSEC and/or DANA in the (advanced) account and identity settings (since version 1.2148). -Note that only some email servers support DANE and that only a limited number of DNS servers support DNSSEC, which is required for DANE. - -Except for DANE, FairEmail won't enforce DNSSEC because adoption of DNSSEC is still limited (~30% at the start of 2024). +Note that only some email providers support DANE and that only a limited number of DNS servers support DNSSEC (January 2024: ~30%), which is required for DANE.
diff --git a/index.html b/index.html index 92507de6cc..701bdf6a89 100644 --- a/index.html +++ b/index.html @@ -366,7 +366,7 @@
  • (199) Can you add proxy support?
  • (200) How can I use Adguard to remove tracking parameters?
  • (201) What is certificate transparency?
    • -
  • (202) What is DANE?
    • +
  • (202) What is DNSSEC and what is DANE?

    • I have another question.

    (1) Which permissions are needed and why?

    @@ -2775,12 +2775,12 @@ adb install /path/to/FairEmail-xxx.apk

    When certificate transparency is enabled in the connection-settings tab page of the app, the Chrome Certificate Transparency Policy will be applied.

    FairEmail uses this library to implement certificate transparency via a custom trust manager.


    -

    (202) What is DANE?

    +

    (202) What is DNSSEC and what is DANE?

    +

    Please see this Wikipedia article about what DNSSEC is.

    Please see this article about what DANE is. Alternatively, see this Wikipedia article.

    -

    You can use this tool to generate TSLA DNS records.

    -

    You can enable enforcing DANA in the (advanced) account and identity settings (since version 1.2148).

    -

    Note that only some email servers support DANE and that only a limited number of DNS servers support DNSSEC, which is required for DANE.

    -

    Except for DANE, FairEmail won’t enforce DNSSEC because adoption of DNSSEC is still limited (~30% at the start of 2024).

    +

    You can use this tool to generate TSLA DNS records for DANE.

    +

    You can enable enforcing DNSSEC and/or DANA in the (advanced) account and identity settings (since version 1.2148).

    +

    Note that only some email providers support DANE and that only a limited number of DNS servers support DNSSEC (January 2024: ~30%), which is required for DANE.


    Get support