From 5bff63189420e74288c7a34898c6d0a5552dc926 Mon Sep 17 00:00:00 2001 From: M66B Date: Wed, 17 Jan 2024 20:44:50 +0100 Subject: [PATCH] Updated FAQ --- FAQ.md | 2 +- index.html | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/FAQ.md b/FAQ.md index 47fe0e542f..759341e278 100644 --- a/FAQ.md +++ b/FAQ.md @@ -5723,7 +5723,7 @@ Most private DNS providers support DNSSEC, though. You can configure private DNS To be sure that private DNS is being used, better configure a host name like *dns.google*, *1dot1dot1dot1.cloudflare-dns.com* or *dns.quad9.net*. An alternative is using Certificate Transparency, see the previous FAQ. -Some email providers known to support DANE: +Some email providers known to support DANE for client-to-server traffic: * [Disroot.org](https://disroot.org/) * [Freenet.de](https://email.freenet.de/) diff --git a/index.html b/index.html index c72cacc9a8..fc54ae7c39 100644 --- a/index.html +++ b/index.html @@ -2794,7 +2794,7 @@ adb install /path/to/FairEmail-xxx.apk

You can use this tool to generate TLSA DNS records for DANE (select either PKIX-EE or DANE-EE).

You can enable enforcing DNSSEC and/or DANA in the (advanced) account and identity settings (since version 1.2149).

Note that only some email providers support DANE and that only a limited number of DNS servers support DNSSEC (January 2024: ~30%), which is required for DANE. Most private DNS providers support DNSSEC, though. You can configure private DNS in the Android network settings (since Android 9). To be sure that private DNS is being used, better configure a host name like dns.google, 1dot1dot1dot1.cloudflare-dns.com or dns.quad9.net. An alternative is using Certificate Transparency, see the previous FAQ.

-

Some email providers known to support DANE:

+

Some email providers known to support DANE for client-to-server traffic: