Re: DANE-TLSA Support?

Sam Varshavchik <[email protected]> Thu, 23 Oct 2025 20:02:46 -0400

Newsgroups	gmane.mail.imap.courier.general
Message-ID	<[email protected]>

Sabahattin Gucukoglu via courier-users writes:

> Hi.
>
> I notice Courier has quietly added MTA-STS support in the ESMTP client.  
> Cool. It means the core delivery engine could be an excellent general- 
> purpose MTA for a new project I’m thinking about.
>
> But how about DANE TLSA support? Would require support for checking the AD  
> bit in the DNS client, as well as support for TLSA record types. But, if it  
> could be supported similarly to MTA-STS, that would mean one more nail in  
> the coffin of best-effort TLS.
>
> The only other requirement I have personally is SOCKS support, but that  
> appears to be a Debian packaging limitation.

There is no DANE support in Courier. I have not looked into DANE support, in  
any notable detail. I can only say that Courier makes DNS queries directly,  
without using a resolver library, so in theory it should be able to send and  
process anything in DNS.

_______________________________________________
courier-users mailing list
[email protected]
Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users

signature.asc (application/pgp-signature, 228 B)