From ecdfedfaff995fad1173157995a483f1b6881b90 Mon Sep 17 00:00:00 2001 From: M66B Date: Wed, 3 Jan 2024 13:49:14 +0100 Subject: [PATCH] Added FAQ about DANE --- FAQ.md | 16 +++++++++++++++- index.html | 9 ++++++++- 2 files changed, 23 insertions(+), 2 deletions(-) diff --git a/FAQ.md b/FAQ.md index 160f94155d..532a1f2480 100644 --- a/FAQ.md +++ b/FAQ.md @@ -411,7 +411,8 @@ Anything on this list is in random order and *might* be added in the near future * [(198) Can you add spell checking?](#faq198) * [(199) Can you add proxy support?](#faq199) * [(200) How can I use Adguard to remove tracking parameters?](#faq200) -* [(201) What is certificate transparency](#faq201) +* [(201) What is certificate transparency?](#faq201) +* [(202) What is DANE?](#faq202) [I have another question.](#get-support) @@ -5670,6 +5671,19 @@ FairEmail uses [this library](https://github.com/appmattus/certificatetransparen
+ +**(202) What is DANE?** + +Please see [this Wikipedia article](https://en.wikipedia.org/wiki/DNS-based_Authentication_of_Named_Entities) about what DANE is. + +You can use [this tool](https://ssl-tools.net/tlsa-generator) to generate TSLA DNS records. + +You can enable enforcing DANA in the (advanced) account and identity settings (since version 1.2148). + +Note that only some email servers support DANE and that only a limited number of DNS servers support DNSSEC, which is required for DANE. + +
+

Get support

🌎 [Google Translate](https://translate.google.com/translate?sl=en&u=https%3A%2F%2Fm66b.github.io%2FFairEmail%2F%23get-support) diff --git a/index.html b/index.html index 671cbb4f63..6832245081 100644 --- a/index.html +++ b/index.html @@ -364,7 +364,8 @@
  • (198) Can you add spell checking?
  • (199) Can you add proxy support?
  • (200) How can I use Adguard to remove tracking parameters?
  • -
  • (201) What is certificate transparency
  • +
  • (201) What is certificate transparency?
  • +
  • (202) What is DANE?
  • I have another question.

    (1) Which permissions are needed and why?

    @@ -2773,6 +2774,12 @@ adb install /path/to/FairEmail-xxx.apk

    When certificate transparency is enabled in the connection-settings tab page of the app, the Chrome Certificate Transparency Policy will be applied.

    FairEmail uses this library to implement certificate transparency via a custom trust manager.


    +

    (202) What is DANE?

    +

    Please see this Wikipedia article about what DANE is.

    +

    You can use this tool to generate TSLA DNS records.

    +

    You can enable enforcing DANA in the (advanced) account and identity settings (since version 1.2148).

    +

    Note that only some email servers support DANE and that only a limited number of DNS servers support DNSSEC, which is required for DANE.

    +


    Get support