3 ms·

We'll be reviving draft-dnssec-chain-extension as an individual submission.

• tptacek 7y ago
  With a pinning mechanism? Also, out of curiosity, what’s taking so long?
  • tialaramex 7y ago
    The draft "pinning mechanism" was not like HPKP and insisting on portraying it this way was a recurring part of the bad faith effort to derail the working group efforts earlier. It's a "pinning mechanism" like HSTS, so it doesn't work as a ransom tool, and the risk of a foot-gun is much more manageable. You're apparently very enthusiastic about MTA-STS, which has roughly the same pinning.
    • tptacek 7y ago
      I like pinning. It's the browser vendors who don't.