<p>FairEmail uses <ahref="https://github.com/appmattus/certificatetransparency">this library</a> to implement certificate transparency via a custom trust manager.</p>
<p><br></p>
<p><aname="faq202"></a><strong>(202) What is DANE?</strong></p>
<p>Please see <ahref="https://en.wikipedia.org/wiki/DNS-based_Authentication_of_Named_Entities">this Wikipedia article</a> about what DANE is.</p>
<p>Please see <ahref="https://github.com/internetstandards/toolbox-wiki/blob/main/DANE-for-SMTP-how-to.md">this article</a> about what DANE is. Alternatively, see <ahref="https://en.wikipedia.org/wiki/DNS-based_Authentication_of_Named_Entities">this Wikipedia article</a>.</p>
<p>You can use <ahref="https://ssl-tools.net/tlsa-generator">this tool</a> to generate TSLA DNS records.</p>
<p>You can enable enforcing DANA in the (advanced) account and identity settings (since version 1.2148).</p>
<p>Note that only some email servers support DANE and that only a limited number of DNS servers support DNSSEC, which is required for DANE.</p>