In this post, let’s have a look at the error message “4.7.323 – tlsa-invalid: The domain failed DANE validation.” that you get when working with Microsoft 365 Exchange Online.
These are the errors that you usually receive when there is a problem in delivering the email message that was sent by you. These errors are generated and sent by Office 365. This is usually alled as DSN which stands for delivery status notification or in simple words bounce messages.
NDR or Non-delivery report is one of the common type of message that you receive which indicates to the user that the email was not delivered.
Error Message
4.7.323 – tlsa-invalid: The domain failed DANE validation.
Error Details
Records are DNSSEC authentic, but one or multiple of these scenarios occurred:
The destination mail server’s certificate doesn’t match with what is expected per the authentic TLSA record.
Authentic TLSA record is misconfigured.
Destination domain is being attacked.
Any other DANE failure.
This message usually indicates an issue on the destination email server. Check the validity of recipient address and determine if the destination server is configured correctly to receive messages. For more information, see DANE protocol: updates and operational guidance
