Re: quick DANE question

2016-12-16 Thread Viktor Dukhovni
> On Dec 16, 2016, at 1:39 AM, Alice Wonder wrote: > > When an SMTP server publishes a TLSA record, will DANE enforcing SMTP servers > refuse to connect if the TLSA record matches the certificate but the > certificate has expired? That depends on the TLSA records: https://tools.ietf.

quick DANE question

2016-12-15 Thread Alice Wonder
When an SMTP server publishes a TLSA record, will DANE enforcing SMTP servers refuse to connect if the TLSA record matches the certificate but the certificate has expired?