On Fri, Jun 14, 2019 at 10:18:43PM +0300, Lefteris Tsintjelis wrote: > >> Is there a way to check from logs or headers if DANE was used > >> (un)successfully and possibly monitor the method as well? > > > > grep Verified in logs > > This could very well be from the "known" CAs
Actually, no. You'd need to have the destination security level
configured for "secure" or "verify" for that. Otherwise, it
would be at most "Trusted".
http://www.postfix.org/FORWARD_SECRECY_README.html#status
--
Viktor.
