Overview of outbound DANE for SMTP support
Hi,
We made the following overview of products/services with outbound DANE support (i.e. DANE verification). Any remarks/additions are welcome.
I. Supported:
- Postfix (since version 2.11.0, January 2014): http://www.postfix.org/TLS_README.html#client_tls_dane - Halon (since version 3.4-r2, November 2015): https://halon.io/dane and https://wiki.halon.io/DANE - OpenSSL (since version 1.1.0, August 2016): https://www.openssl.org/docs/manmaster/man3/SSL_CTX_dane_enable.html and https://www.openssl.org/docs/manmaster/man1/openssl-s_client.html - Cloudmark (since version 5.2, March 2017): https://blog.cloudmark.com/2017/03/27/dane-and-email-security/ - Exim (since version 4.91, April 2018): https://www.exim.org/exim-html-current/doc/html/spec_html/ch-encrypted_smtp_... - Mail-in-a-Box (uses Postfix): https://github.com/mail-in-a-box/mailinabox/blob/master/security.md - ldns (uses OpenSSL): https://www.nlnetlabs.nl/documentation/ldns/dane_8h.html
II. Requested:
- Cisco: Bug ID: CSCuo87918 - [ Feature Request] TLS DANE Support for Email Security Appliance, https://bst.cloudapps.cisco.com/bugsearch/bug/CSCuo87918/ - MS O365: https://office365.uservoice.com/forums/273493-office-365-admin/suggestions/1... and https://office365.uservoice.com/forums/289138-office-365-security-compliance... - Fortinet: https://fortinet.uservoice.com/forums/23797-fortipartner-feature-requests/su... - Protonmail: https://protonmail.uservoice.com/forums/284483-feedback/suggestions/34338826... and https://protonmail.uservoice.com/forums/284483-feedback/suggestions/16593601...
BTW a simple outbound DANE test can be found on https://havedane.net.
On Tue, Jul 17, 2018, Knubben, B.S.J. (Bart) - Forum Standaardisatie wrote:
We made the following overview of products/services with outbound DANE support (i.e. DANE verification). Any remarks/additions are welcome.
I. Supported:
MeTA1 http://www.meta1.org/ since about 2016-08 (with OpenSSL 1.1)
On 2018-07-17 at 20:20 +0000, Knubben, B.S.J. (Bart) - Forum Standaardisatie wrote:
We made the following overview of products/services with outbound DANE support (i.e. DANE verification). Any remarks/additions are welcome.
I. Supported:
- Exim (since version 4.91, April 2018): https://www.exim.org/exim-html-current/doc/html/spec_html/ch-encrypted_smtp_...
That was the promotion from Experimental status.
Exim has supported DANE, if desired, since version 4.85, released 2015-01-13.
On Tue, Jul 17, 2018 at 08:20:58PM +0000, Knubben, B.S.J. (Bart) - Forum Standaardisatie wrote:
We made the following overview of products/services with outbound DANE support (i.e. DANE verification). Any remarks/additions are welcome.
[...]
Are you keeping this list on a website somewhere?
We made the following overview of products/services with outbound DANE support (i.e. DANE verification). Any remarks/additions are welcome.
[...]
Are you keeping this list on a website somewhere?
Not yet... feel free to reuse it on your website.
Cisco added support for outbound DANE verification to their Email Security Appliance (AsyncOS v12.0):
* https://www.cisco.com/c/dam/en/us/td/docs/security/esa/esa12-0/ESA_12-0_Rele... * https://www.cisco.com/c/en/us/td/docs/security/esa/esa12-0/user_guide/b_ESA_...
Are you keeping this list on a website somewhere?
I put the list with software that supports DANE verification and some other pointers to DANE materials/resources on https://github.com/baknu/DANE-for-SMTP/wiki Feel free to reuse. Suggestions/remarks are welcome.
Hi,
We recently added some more software products, like Baruwa, Proofpoint ("limited implementation") and Fortimail, to the list with software that supports DANE verification on https://github.com/baknu/DANE-for-SMTP/wiki/3.-Software-and-service-support Additions/remarks are welcome.
-- Best regards,
Bart Knubben Dutch Standardisation Forum https://www.forumstandaardisatie.nl/content/english
-----Oorspronkelijk bericht----- Van: Knubben, B.S.J. (Bart) - Forum Standaardisatie Verzonden: dinsdag 27 november 2018 17:04 Aan: dane-users@sys4.de Onderwerp: RE: Overview of outbound DANE for SMTP support
Cisco added support for outbound DANE verification to their Email Security Appliance (AsyncOS v12.0):
0_Release_Notes.pdf
0/user_guide/b_ESA_Admin_Guide_12_0/b_ESA_Admin_Guide_12_0_chapter_011 000.html#id_85605
Are you keeping this list on a website somewhere?
I put the list with software that supports DANE verification and some other pointers to DANE materials/resources on https://github.com/baknu/DANE-for-SMTP/wiki Feel free to reuse. Suggestions/remarks are welcome.
-- Best regards,
Bart Knubben Dutch Standardisation Forum https://www.forumstandaardisatie.nl/content/english
Dit bericht kan informatie bevatten die niet voor u is bestemd. Indien u niet de geadresseerde bent of dit bericht abusievelijk aan u is toegezonden, wordt u verzocht dat aan de afzender te melden en het bericht te verwijderen. De Staat aanvaardt geen aansprakelijkheid voor schade, van welke aard ook, die verband houdt met risico's verbonden aan het elektronisch verzenden van berichten. This message may contain information that is not intended for you. If you are not the addressee or if this message was sent to you by mistake, you are requested to inform the sender and delete the message. The State accepts no liability for damage of any kind resulting from the risks inherent in the electronic transmission of messages.
participants (5)
-
Knubben, B.S.J. (Bart) - Forum Standaardisatie -
Knubben, Bart
-
ml+dane-users＠esmtp.org -
Phil Pennock -
Viktor Dukhovni