4 ms·

That’s completely wrong. TLS today depends entirely on DNS – because anyone can receive a certificate for your domain if they control your DNS.

• tptacek 9y ago
  This is addressed in the second paragraph of the post I cited.
  • kuschku 9y ago
    No? It’s not addressed at all how the current CA + DNS validation model is in supposedly better than DANE+DNSSEC.