3 ms·
Good initiative. Question is; what does the TLS icon indicate; is it just opportunistic TLS, or do they do any verification? What, if so? Some private consortiu
by Bino 11y ago
Good initiative. Question is; what does the TLS icon indicate; is it just opportunistic TLS, or do they do any verification? What, if so? Some private consortium where only members can get a "green lock"?
What's the next step? Do they have DANE https://en.wikipedia.org/wiki/DNS-based_Authentication_of_Named_Entities https://en.wikipedia.org/wiki/DNS-based_Authentication_of_Na... in mind, or some other initiative to get verified encryption such as "TES" https://openbit.eu/projekte/trusted-internet-services/ https://openbit.eu/projekte/trusted-internet-services/
- talideon 11y agoDANE comes with its own complications: it means you need DNSSEC, and that's a bit of a pain to set up at the best of times, especially with there being no way to currently automating DS/DNSKEY record updates to maintain the trust chain. There have been some mutterings in the IETF ProvReg WG on ways of allowing registrants some ability to automate the process, but it's still early days.