Re: DANE verification enabled on MS Exchange Online

Viktor Dukhovni ietf-dane@dukhovni.org writes:

Please also avoid WHOIS "privacy", and ensure working rolee contact addresses that are read by a human at least daily in:

• WHOIS records for the domain.
• The DNS SOA "rname" field for the domain
• Contact addresses on your website if applicable
• Working "postmaster@" and/or "admin@" mailboxes.

If you do botch your TLSA records, it should be possible to reach someone to address the issue.

Is this recommending using non-DANE domains for such contact points?

Bjørn