4 ms·
HTTPS RR is great, but not super useful at this point... I wish they would would invest more in stuff that would have a practical benefit to user experience/sec
by JshWright 5y ago
HTTPS RR is great, but not super useful at this point... I wish they would would invest more in stuff that would have a practical benefit to user experience/security. Firefox's lack of TouchID support for WebAuthn is what keeps me on Chrome.
- amaccuish 5y ago> HTTPS RR is great, but not super useful at this point. I still find it a shame that SRV records never caught on. Active Directory uses them very well
- Zash 5y agoand SIP, and XMPP, and maybe the odd email client
- mawise 5y agoFeel free to chime in on the open bug report for this missing feature. Maybe more attention will provoke progress: https://bugzilla.mozilla.org/show_bug.cgi?id=1536482 https://bugzilla.mozilla.org/show_bug.cgi?id=1536482
- JshWright 5y agoI "voted" on it a couple years ago. I assume "+1" comments are frowned upon, since that's the point of the voting feature.
- GekkePrutser 5y agoAnd full FIDO2 token (e.g. yubikey) support for passwordless (CTAP, also part of webauthn) would also be amazing.
- xfalcox 5y agoDid you get Firefox to actually issue those HTTPS RR requests? Or is it locked behind using DoH ?
- JshWright 5y agoHTTPS RR really only makes sense with DoH.
- xfalcox 5y agoWhy? - Apple devices running iOS 14+ are querying HTTPS RR for some time now, and they work on normal DNS setups. - Google Chrome just enabled HTTPS RR queries over standard DNS on version 92.
- JshWright 5y agoIf an attacker is in a position to downgrade your TLS connection, they are in a position to much with your standard DNS responses as well.