Wietse Venema:
> How do those 'other' connections differ from what is shown above?
A. Schulze:
> I don't see differences. This tlsproxy process handled a connection
> to gmail, outlook.com and some other destinations. All unverified
> because I did not configure the matching root certificates.
Conclusion: Postfix works as expected? I see no unexplained failures.
> Interesting: it also handled later an other connection to an other
> destination that *could* be verified using DANE (verified connection
> established to ...)
That is expected. DANE aims to lessen the dependency on PKI.
Wietse
