From 93f81499cf4d0aa9e743953fe1b0ed205d7bc152 Mon Sep 17 00:00:00 2001 From: M66B Date: Fri, 5 Jan 2024 14:03:03 +0100 Subject: [PATCH] Updated FAQ --- FAQ.md | 3 ++- index.html | 2 +- 2 files changed, 3 insertions(+), 2 deletions(-) diff --git a/FAQ.md b/FAQ.md index f047f1334a..69191792d6 100644 --- a/FAQ.md +++ b/FAQ.md @@ -5675,7 +5675,8 @@ FairEmail uses [this library](https://github.com/appmattus/certificatetransparen **(202) What is DANE?** -Please see [this Wikipedia article](https://en.wikipedia.org/wiki/DNS-based_Authentication_of_Named_Entities) about what DANE is. +Please see [this article](https://github.com/internetstandards/toolbox-wiki/blob/main/DANE-for-SMTP-how-to.md) about what DANE is. +Alternatively, see [this Wikipedia article](https://en.wikipedia.org/wiki/DNS-based_Authentication_of_Named_Entities). You can use [this tool](https://ssl-tools.net/tlsa-generator) to generate TSLA DNS records. diff --git a/index.html b/index.html index 4ec5a820ec..ecfe9b3b2f 100644 --- a/index.html +++ b/index.html @@ -2775,7 +2775,7 @@ adb install /path/to/FairEmail-xxx.apk

FairEmail uses this library to implement certificate transparency via a custom trust manager.


(202) What is DANE?

-

Please see this Wikipedia article about what DANE is.

+

Please see this article about what DANE is. Alternatively, see this Wikipedia article.

You can use this tool to generate TSLA DNS records.

You can enable enforcing DANA in the (advanced) account and identity settings (since version 1.2148).

Note that only some email servers support DANE and that only a limited number of DNS servers support DNSSEC, which is required for DANE.