Check a DANE SMTP Service
This application checks a DANE SMTP Service. It queries the MX record set for the given domain, looks up DANE TLSA records at the MX targets, connects to the target servers, negotiates STARTTLS, and then attempts to verify the TLS server certificate against the TLSA records.
Other DANE Tools
References
- RFC 6698: DANE and TLSA record specification, August 2012
- RFC 7671: DANE Protocol: Updates and Operational Guidance
- RFC 7672: SMTP Security via opportunistic DANE TLS
- Unknown Key-Share Attacks on DANE
- DNSSEC and Certificates; October 19 2012
- How DANE Strengthens Security for TLS, S/MIME, and Other Applications; November 2015
- Whither DANE? -- APNIC Blog; July 05 2019
- Shumon Huque's website