DANE verification enabled on MS Exchange Online

[Bjørn Mork]

Viktor Dukhovni <ietf-dane at dukhovni.org> writes:

> Please also avoid WHOIS "privacy", and ensure working rolee contact addresses
> that are read by a human at least daily in:
>
> * WHOIS records for the domain.
> * The DNS SOA "rname" field for the domain
> * Contact addresses on your website if applicable
> * Working "postmaster@" and/or "admin@" mailboxes.
>
> If you do botch your TLSA records, it should be possible to reach someone
> to address the issue.

Is this recommending using non-DANE domains for such contact points?


Bjørn