3 ms·

Then you just move all the WoT issues of the CA system into DNS, no?

• foepys 9y ago
  Yes. But you could argue that securing DNS is necessary anyways and using it for TLS is just the next step.
  • benchaney 9y ago
    What do you mean by necessary?
    • foepys 9y ago
      Things like SPF and SSHFP records are still unprotected without DNSSEC. HTTP, IMAP/POP3, and SMTP may be safe by themselves but it would be nice to have the others covered as well.