NIS2 Directive and email transport encryption
DANE (DNS-Based Authentication of Named Entities, RFC 7672) binds your mail server's TLS certificate to DNS via TLSA records, protected by DNSSEC
combined with MTA-STS for non-DNSSEC domains, you cover both enforcement models
DMARCguard monitors both protocols because compliance requires proving ongoing enforcement, not just initial deployment





