3 ms·
isn't this what whois is for? barring that, (not much space for public keys and preference flags i guess), how about DNS TXT records. just some file on the ro
by a-dub 6y ago
isn't this what whois is for?
barring that, (not much space for public keys and preference flags i guess), how about DNS TXT records.
just some file on the root of the webserver seems a security issue itself. typically less people have keys to DNS. also, rare today, but not all domains have webservers.
- jagger27 6y agoIn my experience WHOIS is basically useless now. All of my domains are registered through a privacy service and every time I've gone to check some sketchy domain's WHOIS out in recent memory I've found the same thing.
- a-dub 6y agosure, what about TXT records then? seems dangerous that anyone who can modify the root of a webserver content can impersonate security contacts/pubkeys.
- Anunayj 6y agowell .well-known should be well guarded anyway, since it is used for things like issuing SSL certs by Let's Encrypt (and possibly more CAs). Giving anyone access to your root of webserver is giving anyone access to your website.