3 ms·
One of the advantages of DNSSEC, is that it allows you to use DNS as a secure validator for things like public ssh keys (SSHFP records), CA/TLSA records and oth
by kazen44 5y ago
One of the advantages of DNSSEC, is that it allows you to use DNS as a secure validator for things like public ssh keys (SSHFP records), CA/TLSA records and other data which needs integrity.
- tptacek 5y agoMeanwhile, in reality, people already have SSH PKIs that they control themselves (for instance, in order to tie SSH to SSO IdPs), and those PKIs have nothing whatsoever to do with DNSSEC.