DANE verification enabled on MS Exchange Online

Bjørn Mork bjorn at mork.no
Wed May 25 14:03:29 CEST 2022

Viktor Dukhovni <ietf-dane at dukhovni.org> writes:

> Please also avoid WHOIS "privacy", and ensure working rolee contact addresses
> that are read by a human at least daily in:
> * WHOIS records for the domain.
> * The DNS SOA "rname" field for the domain
> * Contact addresses on your website if applicable
> * Working "postmaster@" and/or "admin@" mailboxes.
> If you do botch your TLSA records, it should be possible to reach someone
> to address the issue.

Is this recommending using non-DANE domains for such contact points?


More information about the dane-users mailing list