From b4dd39ce4f5803cb9a4167b8304d06dceafa0eaa Mon Sep 17 00:00:00 2001 From: M66B Date: Fri, 31 Oct 2025 11:31:16 +0100 Subject: [PATCH] Fixed typo --- FAQ.md | 2 +- index.html | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/FAQ.md b/FAQ.md index 4f4f6ae9f0..365ff6b0ef 100644 --- a/FAQ.md +++ b/FAQ.md @@ -6241,7 +6241,7 @@ Alternatively, see [this Wikipedia article](https://en.wikipedia.org/wiki/DNS-ba You can use [this tool](https://ssl-tools.net/tlsa-generator) to generate TLSA DNS records for DANE (select either PKIX-EE or DANE-EE). -You can enable enforcing DNSSEC and/or DANA in the (advanced) account and identity settings (since version 1.2149). +You can enable enforcing DNSSEC and/or DANE in the (advanced) account and identity settings (since version 1.2149). Note that only some email providers support DANE and that only a limited number of DNS servers support DNSSEC (January 2024: ~30%), which is required for DANE. Most private DNS providers support DNSSEC, though. You can configure private DNS in the Android network settings (since Android 9). diff --git a/index.html b/index.html index 1655c16155..1821abe753 100644 --- a/index.html +++ b/index.html @@ -3118,7 +3118,7 @@ adb install /path/to/FairEmail-xxx.apk

Please see this Wikipedia article about what DNSSEC is.

Please see this article about what DANE is. Alternatively, see this Wikipedia article.

You can use this tool to generate TLSA DNS records for DANE (select either PKIX-EE or DANE-EE).

-

You can enable enforcing DNSSEC and/or DANA in the (advanced) account and identity settings (since version 1.2149).

+

You can enable enforcing DNSSEC and/or DANE in the (advanced) account and identity settings (since version 1.2149).

Note that only some email providers support DANE and that only a limited number of DNS servers support DNSSEC (January 2024: ~30%), which is required for DANE. Most private DNS providers support DNSSEC, though. You can configure private DNS in the Android network settings (since Android 9). To be sure that private DNS is being used, better configure a host name like dns.google, 1dot1dot1dot1.cloudflare-dns.com or dns.quad9.net. An alternative is using Certificate Transparency, see the previous FAQ.

Some email providers known to support DANE for client-to-server traffic: