3 ms·
The problem I describe and its easy solution are completely independent of DNSSEC.
by acqq 9y ago
The problem I describe and its easy solution are completely independent of DNSSEC.
- zaarn 9y agoDNSSEC is required to secure DNS responses which can be crucial to prevent "every crooked CA" to issue a cert for you. If CAA was interpreted by the browser, you could determine exactly which CA is trusted to issue certs for your site and DNSSEC would ensure that the browser gets the correct list of trusted CAs.