Use DANE if TLSA records are present (#5786)

4329f95b · Thom · 0113e85a · 4329f95b
Commit 4329f95b authored 4 years ago by Thom
--- a/install/tpl/postfix_3-0.conf.master
+++ b/install/tpl/postfix_3-0.conf.master
@@ -11,3 +11,6 @@
 #{stress_adaptive} smtpd_soft_error_limit = ${stress?{2}:{5}}
 #{stress_adaptive} smtpd_timeout = ${stress?{10}:{60}}s

+# validate DANE
+smtp_dns_support_level = dnssec
+smtp_tls_security_level = dane