There is a distinct setting smtp_dns_support_level = dnssec in main.cf. Doing the extra lookups seems doable to me (not looking at the source code so far). Joachim
-----Ursprüngliche Nachricht----- Von: [email protected] <[email protected]> Im Auftrag von Wietse Venema Gesendet: Sunday, 6 February 2022 18:34 An: Postfix users <[email protected]> Betreff: Re: smtp_tls_security_level: dane plus? Postfix turns on DNSSEC when DANE is enabled. Postfix does not turn on DNSSEC by default, because that is not a practical option at this time. Wietse
