Validator strange behaviour/bug?

[Leon Weber]

Hi,

First of all, thanks for the DANE validator, it’s a very useful too!

One thing I’ve noticed:  I have a domain with two MX records, one of
which is missing a TLSA record.  That’s obviously a misconfiguration,
and the validator points that out correctly, however, it seems to ignore
the second MX record:

<https://dane.sys4.de/smtp/lists.zombofant.net>

% dig mx lists.zombofant.net +short
23 io.sotecware.net.
42 mail.sotecware.net.

Is that expected behaviour (stop at earliest error)?  I think it’s
confusing and there should at least be some hint that there may be
further MX records.  Ideally it would just print both MX records and
test both of them.

     -- Leon.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 198 bytes
Desc: Digital signature
URL: <https://mail.sys4.de/cgi-bin/mailman/private/dane-users/attachments/20150114/a4642a59/attachment.pgp>