DANEenabled
DANEenabled is a designation used to describe the capability of a computer system, application, or network service to perform DNS-based Authentication of Named Entities (DANE) validation for Transport Layer Security (TLS) connections. When enabled, clients rely on DNSSEC-protected TLSA records to verify or constrain the server's presented certificate, rather than relying solely on traditional certificate authorities.
How it works: For a given domain and service (for example, https or mail.example.com via TLS), the
Adoption and use cases: DANE is most widely associated with mail servers using STARTTLS to ensure end-to-end
Considerations: Implementing DANEenabled creates dependency on DNSSEC deployment and correct DNS records. It can improve security
See also: DNSSEC, TLSA, DANE, Transport Layer Security, DNS-based Authentication of Named Entities.