There is a distinct setting smtp_dns_support_level = dnssec in main.cf. Doing
the extra lookups seems doable to me (not looking at the source code so far).
Joachim
-----Ursprüngliche Nachricht-----
Von: owner-postfix-us...@postfix.org <owner-postfix-us...@postfix.org> Im
Auftrag von Wietse Venema
Gesendet: Sunday, 6 February 2022 18:34
An: Postfix users <postfix-users@postfix.org>
Betreff: Re: smtp_tls_security_level: dane plus?
Postfix turns on DNSSEC when DANE is enabled. Postfix does not turn on DNSSEC
by default, because that is not a practical option at this time.
Wietse
