How to setup SMTP-DANE and MTA-STS

The answer is provided by Alexander on postfix mailing list. SMTP-DANE Outgoing:# validate DANEsmtp_dns_support_level = dnssecsmtp_tls_security_level = dane   # or dane-only (https://www.postfix.org/TLS_README.html) Incoming: – setup DNSSEC for your domain (out of scope here on the postfix list) – publish TLSA recordse.g. https://www.sidn.nl/en/news-and-blogs/hands-on-implementing-dane-in-postfix (not everything there is […]