Hello,
does anyone here have statistics about DANE enabled mail servers? And
maybe also a timeline showing an increase (hopefully)? I'm running DANE
for some time now and I don't ever get a Verified connection (except to my
second server). That's a bit discouraging. I'd like to have at least once
in a while a "Yeah" effect :-)
Even posting to this list will not result in a "Yeah" :-(
Another question: In one of the postings some time back a TTL of 1 hour
was suggest for TLSA. Why that short? I agree than my 24 hours is a bit
long for switching, as a cert change takes then approx 3 days. But 6-12
hours should be fine.
Ciao
--
http://www.dstoecker.eu/ (PGP key available)
