Updated FAQ

FAQ.md

@@ -413,7 +413,7 @@ Anything on this list is in random order and *might* be added in the near future
 * [(199) Can you add proxy support?](#faq199)
 * [(200) How can I use Adguard to remove tracking parameters?](#faq200)
 * [(201) What is certificate transparency?](#faq201)
-* [(202) What is DANE?](#faq202)
+* [(202) What is DNSSEC and what is DANE?](#faq202)
 
 [I have another question.](#get-support)
 
@@ -5674,18 +5674,18 @@ FairEmail uses [this library](https://github.com/appmattus/certificatetransparen
 <br>
 
 <a name="faq202"></a>
-**(202) What is DANE?**
+**(202) What is DNSSEC and what is DANE?**
+
+Please see [this Wikipedia article](https://en.wikipedia.org/wiki/Domain_Name_System_Security_Extensions) about what DNSSEC is.
 
 Please see [this article](https://github.com/internetstandards/toolbox-wiki/blob/main/DANE-for-SMTP-how-to.md) about what DANE is.
 Alternatively, see [this Wikipedia article](https://en.wikipedia.org/wiki/DNS-based_Authentication_of_Named_Entities).
 
-You can use [this tool](https://ssl-tools.net/tlsa-generator) to generate TSLA DNS records.
-
-You can enable enforcing DANA in the (advanced) account and identity settings (since version 1.2148).
+You can use [this tool](https://ssl-tools.net/tlsa-generator) to generate TSLA DNS records for DANE.
 
-Note that only some email servers support DANE and that only a limited number of DNS servers support DNSSEC, which is required for DANE.
+You can enable enforcing DNSSEC and/or DANA in the (advanced) account and identity settings (since version 1.2148).
 
-Except for DANE, FairEmail won't enforce DNSSEC because adoption of DNSSEC is still limited (~30% at the start of 2024).
+Note that only some email providers support DANE and that only a limited number of DNS servers support DNSSEC (January 2024: ~30%), which is required for DANE.
 
 <br>
 

index.html

@@ -366,7 +366,7 @@
 <li><a href="#faq199">(199) Can you add proxy support?</a></li>
 <li><a href="#faq200">(200) How can I use Adguard to remove tracking parameters?</a></li>
 <li><a href="#faq201">(201) What is certificate transparency?</a></li>
-<li><a href="#faq202">(202) What is DANE?</a></li>
+<li><a href="#faq202">(202) What is DNSSEC and what is DANE?</a></li>
 </ul>
 <p><a href="#get-support">I have another question.</a></p>
 <p><a name="faq1"></a> <strong>(1) Which permissions are needed and why?</strong></p>
@@ -2775,12 +2775,12 @@ adb install /path/to/FairEmail-xxx.apk</code></pre>
 <p>When certificate transparency is enabled in the connection-settings tab page of the app, the <a href="https://github.com/GoogleChrome/CertificateTransparency/blob/master/ct_policy.md">Chrome Certificate Transparency Policy</a> will be applied.</p>
 <p>FairEmail uses <a href="https://github.com/appmattus/certificatetransparency">this library</a> to implement certificate transparency via a custom trust manager.</p>
 <p><br></p>
-<p><a name="faq202"></a> <strong>(202) What is DANE?</strong></p>
+<p><a name="faq202"></a> <strong>(202) What is DNSSEC and what is DANE?</strong></p>
+<p>Please see <a href="https://en.wikipedia.org/wiki/Domain_Name_System_Security_Extensions">this Wikipedia article</a> about what DNSSEC is.</p>
 <p>Please see <a href="https://github.com/internetstandards/toolbox-wiki/blob/main/DANE-for-SMTP-how-to.md">this article</a> about what DANE is. Alternatively, see <a href="https://en.wikipedia.org/wiki/DNS-based_Authentication_of_Named_Entities">this Wikipedia article</a>.</p>
-<p>You can use <a href="https://ssl-tools.net/tlsa-generator">this tool</a> to generate TSLA DNS records.</p>
-<p>You can enable enforcing DANA in the (advanced) account and identity settings (since version 1.2148).</p>
-<p>Note that only some email servers support DANE and that only a limited number of DNS servers support DNSSEC, which is required for DANE.</p>
-<p>Except for DANE, FairEmail won’t enforce DNSSEC because adoption of DNSSEC is still limited (~30% at the start of 2024).</p>
+<p>You can use <a href="https://ssl-tools.net/tlsa-generator">this tool</a> to generate TSLA DNS records for DANE.</p>
+<p>You can enable enforcing DNSSEC and/or DANA in the (advanced) account and identity settings (since version 1.2148).</p>
+<p>Note that only some email providers support DANE and that only a limited number of DNS servers support DNSSEC (January 2024: ~30%), which is required for DANE.</p>
 <p><br></p>
 <h2>
 <a name="get-support"></a>Get support