What is DANE and how does it use DNSSEC?

DANE works only when a domain uses DNSSEC, which adds cryptographic signatures to DNS data. DNSSEC ensures that TLSA records cannot be spoofed or tampered with.

DNSSEC provides the cryptographic chain of trust that proves the TLSA record is authentic and has not been altered by a man in the middle attacker.