Dňa 15. júla 2024 16:26:41 UTC používateľ Wolfgang via Exim-users <exim-users@lists.exim.org> napísal:
>and make sure, that it persists: `options trust-ad` See man resolv.conf for >details. >Without this setting glibc drops the ad-bit from your authoritative nameserver >and exim is therefore unable, to establish DANE secured connections. One important note: one can enable "trust-ad" if and only if have **trusted resolver** (mostly understand own) **and** it is connected over **trusted network** (mostly understand localhost). That is AFAIK main reason why it is not enabled by default. Othervise AD can provide fake feel of security, with zero value. regards -- Slavko https://www.slavino.sk/ -- ## subscription configuration (requires account): ## https://lists.exim.org/mailman3/postorius/lists/exim-users.lists.exim.org/ ## unsubscribe (doesn't require an account): ## exim-users-unsubscr...@lists.exim.org ## Exim details at http://www.exim.org/ ## Please use the Wiki with this list - http://wiki.exim.org/
