On Sun, Jan 19, 2025 at 08:19:25AM -0500, Wietse Venema via Postfix-users wrote:
> Or we could rearrange the Postfix TLS stack and skip a host when
> DANE is required but trust anchors are unavailable.
This makes considerable sense with "dane-only". There's really no point
attempting to connect to a non-DANE host and then just fail. I'd even
expec we're skipping it already, and oversight perhaps if we are.
--
Viktor.
_______________________________________________
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org
