diff --git a/FAQ.md b/FAQ.md
index 65f3ff861d..f047f1334a 100644
--- a/FAQ.md
+++ b/FAQ.md
@@ -5683,6 +5683,8 @@ You can enable enforcing DANA in the (advanced) account and identity settings (s
 
 Note that only some email servers support DANE and that only a limited number of DNS servers support DNSSEC, which is required for DANE.
 
+Except for DANE, FairEmail won't enforce DNSSEC because adoption of DNSSEC is still limited (~30% at the start of 2024).
+
 <br>
 
 <h2><a name="get-support"></a>Get support</h2>
diff --git a/index.html b/index.html
index fa6b568621..4ec5a820ec 100644
--- a/index.html
+++ b/index.html
@@ -2779,6 +2779,7 @@ adb install /path/to/FairEmail-xxx.apk</code></pre>
 <p>You can use <a href="https://ssl-tools.net/tlsa-generator">this tool</a> to generate TSLA DNS records.</p>
 <p>You can enable enforcing DANA in the (advanced) account and identity settings (since version 1.2148).</p>
 <p>Note that only some email servers support DANE and that only a limited number of DNS servers support DNSSEC, which is required for DANE.</p>
+<p>Except for DANE, FairEmail won’t enforce DNSSEC because adoption of DNSSEC is still limited (~30% at the start of 2024).</p>
 <p><br></p>
 <h2>
 <a name="get-support"></a>Get support