Added FAQ about DANE

This commit is contained in:
M66B 2024-01-03 13:49:14 +01:00
parent c8ef416345
commit ecdfedfaff
2 changed files with 23 additions and 2 deletions

16
FAQ.md
View File

@ -411,7 +411,8 @@ Anything on this list is in random order and *might* be added in the near future
* [(198) Can you add spell checking?](#faq198)
* [(199) Can you add proxy support?](#faq199)
* [(200) How can I use Adguard to remove tracking parameters?](#faq200)
* [(201) What is certificate transparency](#faq201)
* [(201) What is certificate transparency?](#faq201)
* [(202) What is DANE?](#faq202)
[I have another question.](#get-support)
@ -5670,6 +5671,19 @@ FairEmail uses [this library](https://github.com/appmattus/certificatetransparen
<br>
<a name="faq202"></a>
**(202) What is DANE?**
Please see [this Wikipedia article](https://en.wikipedia.org/wiki/DNS-based_Authentication_of_Named_Entities) about what DANE is.
You can use [this tool](https://ssl-tools.net/tlsa-generator) to generate TSLA DNS records.
You can enable enforcing DANA in the (advanced) account and identity settings (since version 1.2148).
Note that only some email servers support DANE and that only a limited number of DNS servers support DNSSEC, which is required for DANE.
<br>
<h2><a name="get-support"></a>Get support</h2>
&#x1F30E; [Google Translate](https://translate.google.com/translate?sl=en&u=https%3A%2F%2Fm66b.github.io%2FFairEmail%2F%23get-support)

View File

@ -364,7 +364,8 @@
<li><a href="#faq198">(198) Can you add spell checking?</a></li>
<li><a href="#faq199">(199) Can you add proxy support?</a></li>
<li><a href="#faq200">(200) How can I use Adguard to remove tracking parameters?</a></li>
<li><a href="#faq201">(201) What is certificate transparency</a></li>
<li><a href="#faq201">(201) What is certificate transparency?</a></li>
<li><a href="#faq202">(202) What is DANE?</a></li>
</ul>
<p><a href="#get-support">I have another question.</a></p>
<p><a name="faq1"></a> <strong>(1) Which permissions are needed and why?</strong></p>
@ -2773,6 +2774,12 @@ adb install /path/to/FairEmail-xxx.apk</code></pre>
<p>When certificate transparency is enabled in the connection-settings tab page of the app, the <a href="https://github.com/GoogleChrome/CertificateTransparency/blob/master/ct_policy.md">Chrome Certificate Transparency Policy</a> will be applied.</p>
<p>FairEmail uses <a href="https://github.com/appmattus/certificatetransparency">this library</a> to implement certificate transparency via a custom trust manager.</p>
<p><br></p>
<p><a name="faq202"></a> <strong>(202) What is DANE?</strong></p>
<p>Please see <a href="https://en.wikipedia.org/wiki/DNS-based_Authentication_of_Named_Entities">this Wikipedia article</a> about what DANE is.</p>
<p>You can use <a href="https://ssl-tools.net/tlsa-generator">this tool</a> to generate TSLA DNS records.</p>
<p>You can enable enforcing DANA in the (advanced) account and identity settings (since version 1.2148).</p>
<p>Note that only some email servers support DANE and that only a limited number of DNS servers support DNSSEC, which is required for DANE.</p>
<p><br></p>
<h2>
<a name="get-support"></a>Get support
</h2>