X-Git-Url: https://git.exim.org/users/jgh/exim.git/blobdiff_plain/f2de3a3339ee08778dffb98057f1c19bdcf86374..043b12481513cec52c31717c8ad5248d2b344ad2:/doc/doc-txt/experimental-spec.txt

diff --git a/doc/doc-txt/experimental-spec.txt b/doc/doc-txt/experimental-spec.txt
index 6657f63c7..1a786356e 100644
--- a/doc/doc-txt/experimental-spec.txt
+++ b/doc/doc-txt/experimental-spec.txt
@@ -1130,6 +1130,7 @@ in a router. Exim will then send the success DSN himself if requested as if
 the next hop does not support DSN.
 Adding it to a redirect router makes no difference.
 
+
 Certificate name checking
 --------------------------------------------------------------
 The X509 certificates used for TLS are supposed be verified
@@ -1148,6 +1149,18 @@ a single wildcard being the initial component of a 3-or-more
 component FQDN).
 
 
+DANE
+------------------------------------------------------------
+If dane is in use the following transport options are ignored:
+  tls_verify_hosts
+  tls_try_verify_hosts
+  tls_verify_certificates
+  tls_crl
+  tls_verify_cert_hostnames
+  hosts_require_ocsp
+  hosts_request_ocsp
+
+
 
 --------------------------------------------------------------
 End of file