Validator strange behaviour/bug?

Leon Weber leon at
Wed Jan 14 13:02:12 CET 2015


First of all, thanks for the DANE validator, it’s a very useful too!

One thing I’ve noticed:  I have a domain with two MX records, one of
which is missing a TLSA record.  That’s obviously a misconfiguration,
and the validator points that out correctly, however, it seems to ignore
the second MX record:


% dig mx +short

Is that expected behaviour (stop at earliest error)?  I think it’s
confusing and there should at least be some hint that there may be
further MX records.  Ideally it would just print both MX records and
test both of them.

     -- Leon.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 198 bytes
Desc: Digital signature
URL: <>

More information about the dane-users mailing list