DANE / TLSA Check
Inspect published TLSA records for mail transport.
What this test checks
Published TLSA records and DNSSEC-related validation evidence available to the scanner.
Why this matters
A TLSA record is useful only when its DNSSEC chain validates and it matches the service configuration.
How to fix common problems
Keep TLSA records synchronized with certificate changes and validate DNSSEC before relying on DANE.
FAQ
Is DANE available for every domain?
No. It depends on published TLSA records and valid DNSSEC.