What would you like to read about DANE on the test site?

[Patrick Ben Koetter]

* Markus Benning <ich at markusbenning.de>:
> On Fri, Jan 16, 2015 at 09:54:09AM +0100, Patrick Ben Koetter wrote:
> > Nice! What's error in "TLS Statistics"? Is it the cause of "0  incoming tls connections"?
> > 
> > TLS Statistics
> > --------------
> > Use of uninitialized value $value in division (/) at ./pflogsumm line 1189, <> line 167203.
> >       0  incoming tls connections (0.00% of 8915)
> >    3438  outgoing tls connections
> 
> just fixed it.

confirmed.

> > Outgoing TLS trust-level
> > ------------------------
> >    2289   Untrusted
> >     914   Verified
> >     235   Trusted
> 
> As far as i understand the docs with tls_security_level=dane it should
> mean:
>  
>  Verified - DANE okay (or explicit policy map)
>  Trusted - CA signed certificate
>  Untrusted - unknown CA, selfsigned...
> 
> http://www.postfix.org/FORWARD_SECRECY_README.html


Viktor might have a word on the subtle differences. ;)

p at rick

-- 
[*] sys4 AG
 
https://sys4.de, +49 (89) 30 90 46 64
Franziskanerstraße 15, 81669 München
 
Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263
Vorstand: Patrick Ben Koetter, Marc Schiffbauer
Aufsichtsratsvorsitzender: Florian Kirstein