diff --git a/FAQ.md b/FAQ.md
index 8eeec30f09..c1adae6cf9 100644
--- a/FAQ.md
+++ b/FAQ.md
@@ -5686,6 +5686,7 @@ You can use [this tool](https://ssl-tools.net/tlsa-generator) to generate TSLA D
 You can enable enforcing DNSSEC and/or DANA in the (advanced) account and identity settings (since version 1.2148).
 
 Note that only some email providers support DANE and that only a limited number of DNS servers support DNSSEC (January 2024: ~30%), which is required for DANE.
+An alternative is using Certificate Transparency, see the previous FAQ.
 
 <br>
 
diff --git a/index.html b/index.html
index 701bdf6a89..61e1f0fb83 100644
--- a/index.html
+++ b/index.html
@@ -2780,7 +2780,7 @@ adb install /path/to/FairEmail-xxx.apk</code></pre>
 <p>Please see <a href="https://github.com/internetstandards/toolbox-wiki/blob/main/DANE-for-SMTP-how-to.md">this article</a> about what DANE is. Alternatively, see <a href="https://en.wikipedia.org/wiki/DNS-based_Authentication_of_Named_Entities">this Wikipedia article</a>.</p>
 <p>You can use <a href="https://ssl-tools.net/tlsa-generator">this tool</a> to generate TSLA DNS records for DANE.</p>
 <p>You can enable enforcing DNSSEC and/or DANA in the (advanced) account and identity settings (since version 1.2148).</p>
-<p>Note that only some email providers support DANE and that only a limited number of DNS servers support DNSSEC (January 2024: ~30%), which is required for DANE.</p>
+<p>Note that only some email providers support DANE and that only a limited number of DNS servers support DNSSEC (January 2024: ~30%), which is required for DANE. An alternative is using Certificate Transparency, see the previous FAQ.</p>
 <p><br></p>
 <h2>
 <a name="get-support"></a>Get support