Request to implement TLSA (DANE) on Tommy

[DmC]

It'll cost you nothing, well except for enabling DNSSEC for the domain (once) and updating the DNS record  once every time the certificate renews, and it'll provide more security for users and hopefully more reachability to email:

Check the record for proton mail for example:

https://www.mailhardener.com/tools/dane-validator?domain=mail.protonmail.ch

I see no reason why not

Edited November 27 by DmC

[MoneyBroz]

This support request is being escalated to our root admins.

[Krydos]

We plan on supporting DNSSEC in the future once we upgrade our nameservers.

[DmC]

11 hours ago, Krydos said:

We plan on supporting DNSSEC in the future once we upgrade our nameservers.

I see,

I took for granted DNSSEC is present