On Fri, Oct 13, 2017 at 08:35:10PM +1030, Mal wrote:
> > With DANE turned on, when you send email to a destination with
> > DNSSEC and correctly configured TLSA records, the delivery is logged
> > as "Verified" at smtp_tls_loglevel=1. Barring any explicit tls
> > policies for some special domains, anything that is logged as "Verified"
> > used DANE to do reach that state.
>
> Is loglevel=1 the only level it logs the verified entry on ? Or is this
> the minimum logging level. ie, when verbose OR very verbose you will
> also see it.
It is the minimum, but since you should NOT be using any higher
level the question is not especially relevant. With the higher
levels, the information in question is liable to be drowned out by
all the excess noise, and delivery performance may suffer significantly
from the logging overhead. Some logging services might even start
dropping log messages and the wanted messages might be lost.
--
Viktor.
