Updated FAQ

FAQ.md

@@ -5683,6 +5683,8 @@ You can enable enforcing DANA in the (advanced) account and identity settings (s
 
 Note that only some email servers support DANE and that only a limited number of DNS servers support DNSSEC, which is required for DANE.
 
+Except for DANE, FairEmail won't enforce DNSSEC because adoption of DNSSEC is still limited (~30% at the start of 2024).
+
 <br>
 
 <h2><a name="get-support"></a>Get support</h2>

index.html

@@ -2779,6 +2779,7 @@ adb install /path/to/FairEmail-xxx.apk</code></pre>
 <p>You can use <a href="https://ssl-tools.net/tlsa-generator">this tool</a> to generate TSLA DNS records.</p>
 <p>You can enable enforcing DANA in the (advanced) account and identity settings (since version 1.2148).</p>
 <p>Note that only some email servers support DANE and that only a limited number of DNS servers support DNSSEC, which is required for DANE.</p>
+<p>Except for DANE, FairEmail won’t enforce DNSSEC because adoption of DNSSEC is still limited (~30% at the start of 2024).</p>
 <p><br></p>
 <h2>
 <a name="get-support"></a>Get support