[pfx] Re: DANE and STS

2024-06-25 Thread Wietse Venema via Postfix-users
Jeff Pang via Postfix-users: > > I asked the question "what's smtp dane in modern email system?" to > chatgpt. Here is gpt's answer which I think to be valueful. so I share here. I see similarities with https://www.nccoe.nist.gov/publication/1800-6/VolB/index.html Wietse _

[pfx] Re: DANE and STS

2024-06-25 Thread Benny Pedersen via Postfix-users
Jeff Pang via Postfix-users skrev den 2024-06-25 08:44: how to deploy the following email security features? google it :) RFC 7672 SMTP-DANE smtp_dns_support_level = dnssec smtp_tls_security_level = dane thats all if you already have tls setup in smtp_ test with posttls-finger your-

[pfx] Re: DANE and STS

2024-06-25 Thread Jeff Pang via Postfix-users
I asked the question "what's smtp dane in modern email system?" to chatgpt. Here is gpt's answer which I think to be valueful. so I share here. -- SMTP DANE (DNS-based Authentication of Named Entities) is a security protocol used in modern email systems to ensure secure and authenticated

[pfx] Re: DANE and STS

2024-06-25 Thread Viktor Dukhovni via Postfix-users
On Tue, Jun 25, 2024 at 10:24:31AM +0200, Alexander Leidinger via Postfix-users wrote: > > how to deploy the following email security features? > > RFC 7672 SMTP-DANE > > Outgoing: > # validate DANE > smtp_dns_support_level = dnssec > smtp_tls_security_level = dane # or dane-only > (https

[pfx] Re: DANE and STS

2024-06-25 Thread Jeff Pang via Postfix-users
Thanks alex so much for the great info. Am 2024-06-25 08:44, schrieb Jeff Pang via Postfix-users: Hello sorry for the beginner question. how to deploy the following email security features? RFC 7672 SMTP-DANE Outgoing: # validate DANE smtp_dns_support_level = dnssec smtp_tls_security

[pfx] Re: DANE and STS

2024-06-25 Thread Alexander Leidinger via Postfix-users
Am 2024-06-25 08:44, schrieb Jeff Pang via Postfix-users: Hello sorry for the beginner question. how to deploy the following email security features? RFC 7672 SMTP-DANE Outgoing: # validate DANE smtp_dns_support_level = dnssec smtp_tls_security_level = dane # or dane-only (https://www