3 ms·
The registrars would love this ;) DANE and DNSSEC feel to me like the only currently proposed replacement for the CA system that has a chance of succeeding, n
by kiallmacinnes 12y ago
The registrars would love this ;)
DANE and DNSSEC feel to me like the only currently proposed replacement for the CA system that has a chance of succeeding, not necessarily because of technical superiority, but because of practicality and simply being "good enough".
- marcosdumay 12y agoIt's technically superior. Instead of trusting 600 CAs, with DNAE you only trust the TLD, second level if existent, and registrar. It's an incredibly smaller attack surface. You can also register in a second TLD, inserting redundancy into any system that knows your address beforehand.