From 9edcd4d4f0c1a3c9a28a2bf1f8e02c09cbb64916 Mon Sep 17 00:00:00 2001
From: M66B <M66B@users.noreply.github.com>
Date: Mon, 15 Jan 2024 10:32:17 +0100
Subject: [PATCH] Update FAQ

---
 FAQ.md     | 6 +++++-
 index.html | 4 +++-
 2 files changed, 8 insertions(+), 2 deletions(-)

diff --git a/FAQ.md b/FAQ.md
index d19c1833ee..1032e38130 100644
--- a/FAQ.md
+++ b/FAQ.md
@@ -5717,13 +5717,17 @@ Most private DNS providers support DNSSEC, though. You can configure private DNS
 To be sure that private DNS is being used, better configure a host name like *dns.google*, *1dot1dot1dot1.cloudflare-dns.com* or *dns.quad9.net*.
 An alternative is using Certificate Transparency, see the previous FAQ.
 
-Email providers known to support DANE:
+Some email providers known to support DANE:
 
 * [Disroot.org](https://disroot.org/)
 * [Freenet.de](https://email.freenet.de/)
 * [Mailbox.org](https://mailbox.org/)
 * [Posteo.de](https://posteo.de/)
 
+This is not a complete and exhaustive list.
+
+Please see [this article](https://www.zivver.com/blog/why-cisos-and-security-professionals-can-no-longer-rely-on-regular-email-for-the-sharing-of-personal-information) about why DANE is important.
+
 <br>
 
 <h2><a name="get-support"></a>Get support</h2>
diff --git a/index.html b/index.html
index 0a21e3f7b5..e41eb915f5 100644
--- a/index.html
+++ b/index.html
@@ -2791,13 +2791,15 @@ adb install /path/to/FairEmail-xxx.apk</code></pre>
 <p>You can use <a href="https://ssl-tools.net/tlsa-generator">this tool</a> to generate TLSA DNS records for DANE (select either PKIX-EE or DANE-EE).</p>
 <p>You can enable enforcing DNSSEC and/or DANA in the (advanced) account and identity settings (since version 1.2149).</p>
 <p>Note that only some email providers support DANE and that only a limited number of DNS servers support DNSSEC (January 2024: ~30%), which is required for DANE. Most private DNS providers support DNSSEC, though. You can configure private DNS in the Android network settings (since Android 9). To be sure that private DNS is being used, better configure a host name like <em>dns.google</em>, <em>1dot1dot1dot1.cloudflare-dns.com</em> or <em>dns.quad9.net</em>. An alternative is using Certificate Transparency, see the previous FAQ.</p>
-<p>Email providers known to support DANE:</p>
+<p>Some email providers known to support DANE:</p>
 <ul>
 <li><a href="https://disroot.org/">Disroot.org</a></li>
 <li><a href="https://email.freenet.de/">Freenet.de</a></li>
 <li><a href="https://mailbox.org/">Mailbox.org</a></li>
 <li><a href="https://posteo.de/">Posteo.de</a></li>
 </ul>
+<p>This is not a complete and exhaustive list.</p>
+<p>Please see <a href="https://www.zivver.com/blog/why-cisos-and-security-professionals-can-no-longer-rely-on-regular-email-for-the-sharing-of-personal-information">this article</a> about why DANE is important.</p>
 <p><br></p>
 <h2>
 <a name="get-support"></a>Get support