Re:TLS Encrypted Client Hello (formerly ESNI) Enters Draft S...
by badrabbit on Monday June 15, 2020 @02:00AM
(#23524238)
DANE is a thing but also, websites can and should work without DNS (IP SAN) and alsk, it gets difficult when you have multiple subdomains and when the certificate is for the http host instead of the domain. But for regular sites, DANE with CT logs makes a lot of sense
[ Parent
| on HN ]
There are no comments on this comment yet.