From bf49edf5cfe20c87bd018a484973da5476acbb0c Mon Sep 17 00:00:00 2001
From: M66B <M66B@users.noreply.github.com>
Date: Mon, 8 Jan 2024 08:50:31 +0100
Subject: [PATCH] Updated FAQ

---
 FAQ.md     | 11 +++++++++--
 index.html | 12 +++++++++---
 2 files changed, 18 insertions(+), 5 deletions(-)

diff --git a/FAQ.md b/FAQ.md
index c1adae6cf9..c2e88ab63c 100644
--- a/FAQ.md
+++ b/FAQ.md
@@ -5681,13 +5681,20 @@ Please see [this Wikipedia article](https://en.wikipedia.org/wiki/Domain_Name_Sy
 Please see [this article](https://github.com/internetstandards/toolbox-wiki/blob/main/DANE-for-SMTP-how-to.md) about what DANE is.
 Alternatively, see [this Wikipedia article](https://en.wikipedia.org/wiki/DNS-based_Authentication_of_Named_Entities).
 
-You can use [this tool](https://ssl-tools.net/tlsa-generator) to generate TSLA DNS records for DANE.
+You can use [this tool](https://ssl-tools.net/tlsa-generator) to generate TLSA DNS records for DANE.
 
-You can enable enforcing DNSSEC and/or DANA in the (advanced) account and identity settings (since version 1.2148).
+You can enable enforcing DNSSEC and/or DANA in the (advanced) account and identity settings (since version 1.2149).
 
 Note that only some email providers support DANE and that only a limited number of DNS servers support DNSSEC (January 2024: ~30%), which is required for DANE.
+Most private DNS providers support DNSSEC, though. You can configure private DNS in the Android network settings.
 An alternative is using Certificate Transparency, see the previous FAQ.
 
+Email providers known to support DANE:
+
+* [Freenet.de](https://email.freenet.de/)
+* [Mailbox.org](https://mailbox.org/)
+* [Posteo.de](https://posteo.de/)
+
 <br>
 
 <h2><a name="get-support"></a>Get support</h2>
diff --git a/index.html b/index.html
index 61e1f0fb83..ef85717e96 100644
--- a/index.html
+++ b/index.html
@@ -2778,9 +2778,15 @@ adb install /path/to/FairEmail-xxx.apk</code></pre>
 <p><a name="faq202"></a> <strong>(202) What is DNSSEC and what is DANE?</strong></p>
 <p>Please see <a href="https://en.wikipedia.org/wiki/Domain_Name_System_Security_Extensions">this Wikipedia article</a> about what DNSSEC is.</p>
 <p>Please see <a href="https://github.com/internetstandards/toolbox-wiki/blob/main/DANE-for-SMTP-how-to.md">this article</a> about what DANE is. Alternatively, see <a href="https://en.wikipedia.org/wiki/DNS-based_Authentication_of_Named_Entities">this Wikipedia article</a>.</p>
-<p>You can use <a href="https://ssl-tools.net/tlsa-generator">this tool</a> to generate TSLA DNS records for DANE.</p>
-<p>You can enable enforcing DNSSEC and/or DANA in the (advanced) account and identity settings (since version 1.2148).</p>
-<p>Note that only some email providers support DANE and that only a limited number of DNS servers support DNSSEC (January 2024: ~30%), which is required for DANE. An alternative is using Certificate Transparency, see the previous FAQ.</p>
+<p>You can use <a href="https://ssl-tools.net/tlsa-generator">this tool</a> to generate TLSA DNS records for DANE.</p>
+<p>You can enable enforcing DNSSEC and/or DANA in the (advanced) account and identity settings (since version 1.2149).</p>
+<p>Note that only some email providers support DANE and that only a limited number of DNS servers support DNSSEC (January 2024: ~30%), which is required for DANE. Most private DNS providers support DNSSEC. You can configure private DNS in the Android network settings. An alternative is using Certificate Transparency, see the previous FAQ.</p>
+<p>Email providers known to support DANE:</p>
+<ul>
+<li><a href="https://email.freenet.de/">Freenet.de</a></li>
+<li><a href="https://mailbox.org/">Mailbox.org</a></li>
+<li><a href="https://posteo.de/">Posteo.de</a></li>
+</ul>
 <p><br></p>
 <h2>
 <a name="get-support"></a>Get support