DANE publishes TLSA records that describe acceptable TLS authentication information for a service.
For SMTP, the records are tied to the MX service endpoint and depend on DNSSEC validation.
DANE’s security model is different from MTA-STS. It uses DNSSEC-protected DNS data rather than an HTTPS-hosted policy.
Operational success therefore depends on correct DNSSEC, TLSA data and certificate/key lifecycle.