(PureMessage is not listed at https://www.sophos.com/en-us/support/feature-requests.aspx so I'm putting this here.)
To allow better inter-system security, please enable support for DNSSEC and DANE in the provided version of Postfix in PureMesage for UNIX. Specifically, I want to specify the following configuration options in /opt/pmx6/postfix/etc/main.cf and not have them fail:
smtp_dns_support_level=dnssec(DANE) TLS authentication is available with Postfix 2.11 and later, so it appears that these options just need to be enabled at compile time.
See http://www.postfix.org/TLS_README.html#client_tls_dane for details.
Thank you for the suggestion. I will pass this along to our team so that they can review the same.