DANE uses DNSSEC to publish TLS certificates for SMTP. Learn how it works and where it’s used.
DANE (DNS-based Authentication of Named Entities) allows domains to publish TLS certificate information in DNS via TLSA records, secured by DNSSEC. For SMTP, it can strengthen transport security.
DANE adoption varies across ecosystems because it depends on DNSSEC and compatible MTAs. Where used, it can reduce certain certificate and downgrade risks.