DNS-based Authentication of Named Entities (DANE)

What is DANE?

DNS-based Authentication of Named Entities (DANE) for SMTP addresses allows for a more secure method of mail transport. DANE allows SMTP servers to establish encrypted TLS connections without the disadvantages of STARTTLS.  DANE is used to ensure reliable encryption for email transport. For this to work as intended, DANE uses the secure version of the Domain Name System (DNSSEC) for retrieving information that is published by a domain name’s owner or administrator. As a result, this information enables SMTP servers to determine up front whether or not another SMTP server supports an encrypted connection while also providing the means of validating the authenticity of the other mail server’s certificate. Confidentiality of email is available to the masses.

Useful Links

• What is DANE?
• DANE for SMTP
• How to Use DANE/TLSA
• DANE for SMTP (Internet.nl)
• DNSSEC and DANE Deployment Statistics
• Software and Service Support

OTHER GCA TOOLS AND PROJECTS

ACT offers an easy-to-use, wiki-style layout that can help you quickly find cybersecurity solutions that fit your unique needs. Using ACT, you can identify cybersecurity solutions to minimize the risk of disruptions to essential services that you and your community rely on.

LEARN MORE

AIDE is a threat intelligence platform that collects data from a globally distributed network of honeypots to offer actionable insights into infected Internet infrastructure.

LEARN MORE

CyberFlex is a safe space for young adults to explore, learn, and share experiences around cybersecurity and online scams. Stay protected. Stay alert. Stay CyberFlexed.

LEARN MORE

DMARC is a mechanism that allows senders and receivers to monitor and improve protection of their domain from fraudulent email. Implementing DMARC ensures mail recipients can detect when spammers have spoofed the “From” address on mail messages. 

LEARN MORE

Domain Trust uses the power of data sharing, community building, and mutual agreement to reduce the number and impact of malicious domains. Its data-sharing platform includes 32M+ domains (and growing!), and is working toward identifying industry-validated mechanisms for change.

LEARN MORE

The GCA Cybersecurity Toolkits include free and effective tools that organizations can use to reduce cyber risk right away. GCA has created toolkits that are tailored to the unique needs of specialized industries, including small businesses, individuals, elections offices, mission-based organizations, and journalists.

LEARN MORE

MANRS outlines simple, concrete actions organizations can take, tailored to their role on the Internet, offering four programs for Network Operators, Internet Exchange Points, CDN and Cloud Providers, and Equipment Vendors. Joining MANRS means joining a community of security-minded organizations committed to making the global routing infrastructure more robust and secure.

LEARN MORE

GCA, in collaboration with IBM and PCH, developed Quad9, a free, privacy-focused DNS service that replaces your default DNS settings and blocks access to known malicious sites.

LEARN MORE