Updated FAQ

This commit is contained in:
M66B 2024-01-17 20:44:50 +01:00
parent d9db3b6f7c
commit 5bff631894
2 changed files with 2 additions and 2 deletions

2
FAQ.md
View File

@ -5723,7 +5723,7 @@ Most private DNS providers support DNSSEC, though. You can configure private DNS
To be sure that private DNS is being used, better configure a host name like *dns.google*, *1dot1dot1dot1.cloudflare-dns.com* or *dns.quad9.net*.
An alternative is using Certificate Transparency, see the previous FAQ.
Some email providers known to support DANE:
Some email providers known to support DANE for client-to-server traffic:
* [Disroot.org](https://disroot.org/)
* [Freenet.de](https://email.freenet.de/)

View File

@ -2794,7 +2794,7 @@ adb install /path/to/FairEmail-xxx.apk</code></pre>
<p>You can use <a href="https://ssl-tools.net/tlsa-generator">this tool</a> to generate TLSA DNS records for DANE (select either PKIX-EE or DANE-EE).</p>
<p>You can enable enforcing DNSSEC and/or DANA in the (advanced) account and identity settings (since version 1.2149).</p>
<p>Note that only some email providers support DANE and that only a limited number of DNS servers support DNSSEC (January 2024: ~30%), which is required for DANE. Most private DNS providers support DNSSEC, though. You can configure private DNS in the Android network settings (since Android 9). To be sure that private DNS is being used, better configure a host name like <em>dns.google</em>, <em>1dot1dot1dot1.cloudflare-dns.com</em> or <em>dns.quad9.net</em>. An alternative is using Certificate Transparency, see the previous FAQ.</p>
<p>Some email providers known to support DANE:</p>
<p>Some email providers known to support DANE for client-to-server traffic:</p>
<ul>
<li><a href="https://disroot.org/">Disroot.org</a></li>
<li><a href="https://email.freenet.de/">Freenet.de</a></li>