What is DANE and why is it important?

the hardest engineering decision I made is supporting DANE when almost nobody uses it

DANE (RFC 7671) lets you publish TLSA records in DNS to pin TLS certificates for your mail server

it requires DNSSEC, which most domains don't have and is a rather complex engineering task to get right

adoption is tiny, to say the least

so why did I build full DANE support?

two reasons

1. EU NIS2 compliance is pushing organizations toward stronger transport security, and DANE is the standard that delivers it

2. I believe in building for where email security is going, not where it is

the DMARC market has been stuck at 5 protocols for years because vendors optimize for today's checklist

DMARCguard covers 9 because some of those protocols will matter enormously in 18 months

if I only built what the market already demands, I'd be another dashboard showing pie charts of aggregate reports

https://dmarcguard.io/tools/dane-checker/

#DMARC #EmailSecurity #DANE #NIS2 #Engineering