tesmail.org
DNS-based Authentication of Named Entities (DANE)
We have seen that STARTTLS leaves email servers open to man-in-the-middle attacks because of two shortcomings: It does not provide a way to know in advance whether the destination server supports T…