Comment by matteocontrini

As far as I know, the DANE spec (RFC 7671) requires DNSSEC to be enabled, while MTA-STS does not.