On 07/01/15 02:01, Viktor Dukhovni wrote:
Of the approximately 800 domains that I found to have published
DANE TLSA records for SMTP to date, too many had various problems.
We'll announce a testing site soon that will help detect problems
early, but it won't prevent them if the site's administrator is
not sufficiently disciplined about ongoing operational requirements.
If you understand DNS and email well, are ready to implement DNSSEC
and are good at not losing track of details, please implement DANE,
otherwise, please wait, or use a professionally operated hosting
service that will do it for you.
Thanks a lot for all information that was pretty helpful. I'd be
glad to hear from you once that testing page is ready to be
used.
I will continue to read about that topic and continue to try
in a test-environment.
Jean
