readiness in report or individual domain check. #1426

New issue

Closed

opened 2026-03-02 13:44:06 +03:00 by kerem · 1 comment

kerem commented

2026-03-02 13:44:06 +03:00

Owner

Originally created by @github-inosek-com on GitHub (Sep 8, 2024).
Original GitHub issue: https://github.com/KelvinTegelaar/CIPP/issues/2887

Description of the new feature - must be an in-depth explanation of the feature you want, reasoning why, and the added benefits for MSPs as a whole.

SMTP DANE with DNSSEC is now in public preview. Migrating customer over require the following to be evaluated:

Is MTA-STS deployed (That's something already done in the individual domain check.)
Is the domain already using the new MX format: .*.mx.microsoft
Is DNSSEC enabled (That's something already done in the individual domain check and domain analyser.)

Having visibility in the Domains Analyser to see MTA-STS pass or missing and SMTP DANE pass or missing would be an invaluable tool for human error during the whole migration ordeal.

PowerShell commands you would normally use to achieve above request

Enable-DnssecForVerifiedDomain -DomainName
Enable-SmtpDaneInbound -DomainName

Microsoft documention on it: https://learn.microsoft.com/en-us/purview/how-smtp-dane-works?view=o365-worldwide#how-can-exchange-online-customers-use-inbound-smtp-dane-with-dnssec-in-preview

Microsoft DNSSEC and DANE Validation Test: https://testconnectivity.microsoft.com/tests/O365DaneValidation/input

Originally created by @github-inosek-com on GitHub (Sep 8, 2024). Original GitHub issue: https://github.com/KelvinTegelaar/CIPP/issues/2887 ### Description of the new feature - must be an in-depth explanation of the feature you want, reasoning why, and the added benefits for MSPs as a whole. SMTP DANE with DNSSEC is now in public preview. Migrating customer over require the following to be evaluated: 1. Is MTA-STS deployed (That's something already done in the individual domain check.) 2. Is the domain already using the new MX format: <DomainName>.*.mx.microsoft 3. Is DNSSEC enabled (That's something already done in the individual domain check and domain analyser.) Having visibility in the Domains Analyser to see MTA-STS pass or missing and SMTP DANE pass or missing would be an invaluable tool for human error during the whole migration ordeal. ### PowerShell commands you would normally use to achieve above request Enable-DnssecForVerifiedDomain -DomainName <DomainName> Enable-SmtpDaneInbound -DomainName <DomainName> Microsoft documention on it: https://learn.microsoft.com/en-us/purview/how-smtp-dane-works?view=o365-worldwide#how-can-exchange-online-customers-use-inbound-smtp-dane-with-dnssec-in-preview Microsoft DNSSEC and DANE Validation Test: https://testconnectivity.microsoft.com/tests/O365DaneValidation/input

kerem

2026-03-02 13:44:06 +03:00

closed this issue
added the
enhancement

no-priority
labels

kerem commented

2026-03-02 13:44:07 +03:00

Author

Owner

@KelvinTegelaar commented on GitHub (Sep 8, 2024):

We currently have an Feature Request stop as we're doing a rewrite.

@KelvinTegelaar commented on GitHub (Sep 8, 2024): We currently have an Feature Request stop as we're doing a rewrite.

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

starred/CIPP#1426

No description provided.

Rows
Columns