4 ms·
DANE can at least partly mitigate this, though that assumes that you've DNSSEC set up, along with TLSA records for your mailservers. Setting up DNSSEC is anoth
by talideon 11y ago
DANE can at least partly mitigate this, though that assumes that you've DNSSEC set up, along with TLSA records for your mailservers.
Setting up DNSSEC is another kettle of fish, mind.
- yuhong 11y agoYea, DNSSEC has its own problems. Personally I think a version of HSTS for mail is the best idea for now.