Can't. But if I've given the impression that the majority of CAs are sophisticated, that wasn't intentional.
Re:Spoofing DNS with fragments
by tialaramex on Monday September 10, 2018 @09:36PM
(#17956563)
So to be clear:
You say DNSSEC validation is "too broken" for any public CA to be doing that, but actually the largest (by issuance volume) does exactly that
Whereas you say multi-perspective is so prevalent "many of them" do it, but you aren't able to produce any examples at all.
Maybe time for a re-think?
I do not understand your argument at all, sorry.
tialaramex is mis-reading "do not as a rule" as "never" and then constructing a straw man based upon that, and is also asking you to specifically name any CA that does what you say many of them do. (-:
Can you give specific examples of "many of them" doing multi-perspective DNS today ?