4 ms·
You could use your DNSSEC signing key to sign a validation message (offline, because that doesn't work over DNS).
by c4mpute 3y ago
You could use your DNSSEC signing key to sign a validation message (offline, because that doesn't work over DNS).
- agwa 3y agoAs discussed elsewhere in this thread, domain validation needs to be frequently rechecked. Therefore, it's far more convenient to publish a DNS record than to manually sign messages out-of-band.
- remram 3y agoDNSSEC already provides attestation, why add another layer within the same system?
- c4mpute 3y agoBecause a DNSSEC attestation is usually public, except if you maybe use NSEC 3 and hide the RR behind some random name.