https://bugs.exim.org/show_bug.cgi?id=2704
--- Comment #4 from Jeremy Harris <jgh146exb@???> ---
if (host lookup was dnssec)
if (require dane or try dane)
do TLSA lookup
if (succeed TLSA)
if (TLSA lookup was dnssec)
require DANE-verified TLS connection
else
if (require dane)
do not make connection
else /* try dane */
ordinary connection
elif (nodata TLSA) /* or NOMATCH */
if (require dane)
do not make connection
else
ordinary connection
else (fail lookup TLSA)
do not make connection
else
if (require dane)
do not make connection
else /* try_dane, or unspecified */
ordinary connection
--
You are receiving this mail because:
You are on the CC list for the bug.