3 ms·
I doubt there’s a lack of confidence since DNSSEC/DANE is obviously handling tens of millions of email messages everyday. Since DANE gives you more than just e
by alwillis 7y ago
I doubt there’s a lack of confidence since DNSSEC/DANE is obviously handling tens of millions of email messages everyday.
Since DANE gives you more than just email, it has the advantage right now.
- tptacek 7y agoSince no major email provider uses it, and since they're the driving force behind a standard designed to avoid its use, I think the burden is on you to show that there's confidence in DNSSEC for email.
- alwillis 7y agoIt’s not DNSSEC for email; it’s DANE and TLSA for email. Postfix and Exim, the two most popular MTAa support DANE. I did post data showing that nearly 2 million email servers are using DANE and that number continues to increase.
- tptacek 7y agoWhy is it even remotely interesting that 2 pieces of open source software support a protocol? And why do I care that email forwarders run by registrars that automatically sign domains "support" DNSSEC? What matters is the percentage of all email that uses the protocol. Never use Exim, by the way.