Wez Furlong d920ffb5c4 fix: DANE downgrade resistance ...

We weren't checking the DNSSEC status for A/AAAA when considering
DANE, and were overly permissive in a couple of related cases.

This diff ended up fairly large because the bulk of it is to
facilitate testing.

refs: https://github.com/KumoCorp/kumomta/issues/543
refs: https://github.com/KumoCorp/kumomta/pull/517

2026-07-06 11:46:49 +01:00

..

_index.md

docs: adjust reference to improve search terms

2025-05-16 14:02:19 -07:00

additional_connection_limits.md

docs: update dev -> 2024.11.08-d383b033

2024-11-12 12:25:53 -07:00

additional_message_rate_throttles.md

docs: update dev -> 2024.11.08-d383b033

2024-11-12 12:25:53 -07:00

additional_source_selection_rates.md

docs: update for stable 2025.03.19-1d3f1f67 release

2025-03-20 07:28:32 -07:00

allow_smtp_auth_plain_without_tls.md

docs: split make_egress_path into separate pages

2024-08-18 19:33:31 -07:00

banner_timeout.md

docs: update since dev -> 2024.09.02-c5476b89

2024-09-02 07:27:50 -07:00

connect_timeout.md

docs: update since dev -> 2024.09.02-c5476b89

2024-09-02 07:27:50 -07:00

connection_limit.md

docs: update for 2025.01.23-7273d2bc release

2025-01-23 13:49:35 -07:00

consecutive_connection_failures_before_delay.md

docs: split make_egress_path into separate pages

2024-08-18 19:33:31 -07:00

data_dot_timeout.md

docs: split make_egress_path into separate pages

2024-08-18 19:33:31 -07:00

data_timeout.md

docs: split make_egress_path into separate pages

2024-08-18 19:33:31 -07:00

dispatcher_progress_watchdog_timeout.md

add per-dispatcher state tracking and watchdog

2026-06-23 09:56:45 +01:00

dispatcher_wakeup_strategy.md

docs: update for latest release

2025-05-06 18:24:15 -07:00

ehlo_domain.md

docs: split make_egress_source into separate files

2024-08-18 19:47:35 -07:00

ehlo_timeout.md

docs: split make_egress_path into separate pages

2024-08-18 19:33:31 -07:00

enable_dane.md

fix: DANE downgrade resistance

2026-07-06 11:46:49 +01:00

enable_mta_sts.md

Typo.

2026-03-03 13:53:31 -05:00

enable_pipelining.md

docs: update for 2025.01.23-7273d2bc release

2025-01-23 13:49:35 -07:00

enable_rset.md

docs: update for 2025.01.23-7273d2bc release

2025-01-23 13:49:35 -07:00

enable_tls.md

docs: mention mta-sts and dane on the enable_tls page

2025-03-17 08:52:10 -07:00

idle_timeout.md

docs: split make_egress_path into separate pages

2024-08-18 19:33:31 -07:00

ignore_8bit_checks.md

docs: update for 2025.10.06-5ec871ab release

2025-10-07 07:38:10 +01:00

ip_lookup_strategy.md

docs: update for the 2026.04.09-ea3b2a9b release

2026-04-29 08:07:13 +01:00

low_memory_reduction_policy.md

docs: update for stable 2025.03.19-1d3f1f67 release

2025-03-20 07:28:32 -07:00

mail_from_timeout.md

docs: split make_egress_path into separate pages

2024-08-18 19:33:31 -07:00

maintainer_wakeup_strategy.md

docs: update for latest release

2025-05-06 18:24:15 -07:00

max_connection_rate.md

docs: split make_egress_path into separate pages

2024-08-18 19:33:31 -07:00

max_deliveries_per_connection.md

docs: split make_egress_path into separate pages

2024-08-18 19:33:31 -07:00

max_message_rate.md

fix a few typos in the docs

2024-10-24 12:10:53 -04:00

max_ready.md

docs: split make_egress_path into separate pages

2024-08-18 19:33:31 -07:00

max_recipients_per_batch.md

docs: update for release 2025.12.02-67ee9e96

2025-12-02 11:11:05 +00:00

no_memory_reduction_policy.md

docs: update for stable 2025.03.19-1d3f1f67 release

2025-03-20 07:28:32 -07:00

openssl_cipher_list.md

docs: update since dev -> 2024.09.02-c5476b89

2024-09-02 07:27:50 -07:00

openssl_cipher_suites.md

docs: update since dev -> 2024.09.02-c5476b89

2024-09-02 07:27:50 -07:00

openssl_options.md

docs: update since dev -> 2024.09.02-c5476b89

2024-09-02 07:27:50 -07:00

opportunistic_tls_reconnect_on_failed_handshake.md

docs: update for 2025.01.23-7273d2bc release

2025-01-23 13:49:35 -07:00

prohibited_hosts.md

docs: update for release 2025.12.02-67ee9e96

2025-12-02 11:11:05 +00:00

rcpt_to_timeout.md

docs: split make_egress_path into separate pages

2024-08-18 19:33:31 -07:00

reconnect_strategy.md

docs: update for release

2025-01-29 17:05:37 -07:00

refresh_interval.md

docs: describe the configuration monitoring and epoch system

2024-11-08 07:14:03 -07:00

refresh_strategy.md

docs: update dev -> 2024.11.08-d383b033

2024-11-12 12:25:53 -07:00

remember_broken_tls.md

docs: update dev -> 2024.11.08-d383b033

2024-11-12 12:25:53 -07:00

rset_timeout.md

docs: split make_egress_path into separate pages

2024-08-18 19:33:31 -07:00

rustls_cipher_suites.md

docs: update since dev -> 2024.09.02-c5476b89

2024-09-02 07:27:50 -07:00

skip_hosts.md

new: ip_lookup_strategy option in make_egress_path

2026-03-04 16:33:32 +00:00

smtp_auth_plain_password.md

Add support for custom key names in HashiCorp Vault secrets (#399)

2025-07-25 06:02:21 +01:00

smtp_auth_plain_username.md

We miss you Mister Rogers.

2025-07-18 12:11:14 -04:00

smtp_port.md

allow setting destination smtp port via mx_list

2025-07-21 12:30:29 +01:00

source_selection_rate.md

docs: update for stable 2025.03.19-1d3f1f67 release

2025-03-20 07:28:32 -07:00

starttls_timeout.md

docs: split make_egress_path into separate pages

2024-08-18 19:33:31 -07:00

system_shutdown_timeout.md

docs: update for latest release

2025-05-06 18:24:15 -07:00

tls_certificate.md

docs: update for 2025.10.06-5ec871ab release

2025-10-07 07:38:10 +01:00

tls_prefer_openssl.md

docs: update since dev -> 2024.09.02-c5476b89

2024-09-02 07:27:50 -07:00

tls_private_key.md

docs: update for 2025.10.06-5ec871ab release

2025-10-07 07:38:10 +01:00

try_next_host_on_transport_error.md

docs: update for 2025.10.06-5ec871ab release

2025-10-07 07:38:10 +01:00

use_lmtp.md

docs: update for 2025.01.23-7273d2bc release

2025-01-23 13:49:35 -07:00