Cloudflare Email Security now supports DANE (DNS-based Authentication of Named Entities) for MX deployments. This enhancement strengthens email transport security by enabling DNSSEC-backed certificate verification for our regional MX records.
- Regional MX hostnames now publish DANE TLSA records backed by DNSSEC, enabling DANE-capable SMTP senders to cryptographically validate certificate identities before establishing TLS connections—moving beyond opportunistic encryption to verified encrypted delivery.
- DANE support is automatically available for all customers using regional MX deployments. No additional configuration is required; DANE-capable mail infrastructure will automatically validate MX certificates using the published records.
This applies to all Email Security packages:
- Advantage
- Enterprise
- Enterprise + PhishGuard
Source: Cloudflare
Latest Posts
- MC1455035: Power Pages Rolls Out Early Upgrade to Version 9.8.8.5 with Performance and Security Fixes
- MC1455050: Power Platform Adds GitHub Support for Source Code Integration with Enhanced APIs and Performance
- MC1455051: Dynamics 365 Customer Service and Contact Center Adds Workforce Alerts for Intraday Volume Spikes
- Workers, Access – You can now enable Access on a Worker or all Workers at once
