On 14/6/2019 14:39, Ralph Seichter wrote:
* Lefteris Tsintjelis:Can I use DANE with postfix or do I need a certificate from a known CA in order to do that?With DNSSEC in place, you can simply add the DNS records based on your own CA's data. No need for certificates from a "well known" CA. -Ralph P.S.: I recommend https://dane.sys4.de for testing.
Is it certain that non "well known" CAs can be used? The above site does not validate correctly. It checks DNSSEC and TLSA correctly but comes with an SMTP error "self signed certificate in certificate chain"
smime.p7s
Description: S/MIME Cryptographic Signature
