Checking out mails servers and saw a test for DANE. Time to learn something new? DANE = DNS-based Authentication of Named Entities. Poorly supported in end clients, but I'm liking the ideas presented for verifying what CA is supposed to be the issuing CA. A cross check. May also be useful for self-signed certs. Gonna have to play. https://en.wikipedia.org/wiki/DNS-based_Authentication_of_Named_Entities #certificates #dane #ssl #tls