4 ms·
DANE comes with its own complications: it means you need DNSSEC, and that's a bit of a pain to set up at the best of times, especially with there being no way t
by talideon 11y ago
DANE comes with its own complications: it means you need DNSSEC, and that's a bit of a pain to set up at the best of times, especially with there being no way to currently automating DS/DNSKEY record updates to maintain the trust chain.
There have been some mutterings in the IETF ProvReg WG on ways of allowing registrants some ability to automate the process, but it's still early days.