3 ms·
What do you mean by DNS-based PKI? That sounds interesting, but I can't quite visualize what that is.
by nick-garfield 6y ago
What do you mean by DNS-based PKI? That sounds interesting, but I can't quite visualize what that is.
- cryptonector 6y agoThere are two options: - registries and registrars run name-constrained CAs - DNSSEC/DANE (RFC 6698 https://tools.ietf.org/html/rfc6698)
- dogma1138 6y agoI’m guessing using CERT resource records, that however doesn’t solve how you establish the chain of trust really.