4 ms·
That’s not pure DANE being discussed by a hybrid in which CAs are still playing a role. In pure DANE you need only trust the DNS root.
by topranks 8y ago
That’s not pure DANE being discussed by a hybrid in which CAs are still playing a role.
In pure DANE you need only trust the DNS root.
- tptacek 8y agoThe whole premise of AGL's article is the fact that you can't have pure DANE. Literally, "a hybrid of DANE and CAs" is just a restatement of the sentence "you have to trust all the CAs and the DNS". You haven't said anything in this comment.