Wolfgang Breyha wbreyha at
Mon Jan 19 12:15:34 CET 2015


I'm testing the new exim 4.85 DANE support and it took only some days to
get in trouble...

One of our users tried to send mail to the domain

Their domain and MX hosts are DNSSEC enabled and have TLSA RRs.

The DANE validator
says: "Unusable TLSA Records". Most likely because it is type 1 not allowed

I've set hosts_try_dane = * in my SMTP transport.

Exim refuses to talk to those hosts at all with "failure while setting up
TLS session". Is this expected behavior in terms of DANE-SMTP? What's
postfix doing in this case?

Greetings, Wolfgang
Wolfgang Breyha <wbreyha at> |
Vienna University Computer Center | Austria

More information about the dane-users mailing list