3 ms·
Sure. But if it's used only for DoH/DoT queries inside a DNS resolver, its deployment path is more realistic than adding DANE to all the TLS clients.
by cyberax 1y ago
Sure. But if it's used only for DoH/DoT queries inside a DNS resolver, its deployment path is more realistic than adding DANE to all the TLS clients.
- tptacek 1y agoRight, I agree with that narrow point, but it seems clear to me that neither is going to happen; I think DANE is a dead letter.