News for hackers. Stuff that matters.

A comment on Around 293 intermediate CAs in violation of CA/Browser guidelines. Parent comment

Re:Around 293 intermediate CAs in violation of CA/Browser gu... by tptacek on Wednesday July 08, 2020 @11:11AM (#23770649)
If the goal is to have DNSSEC replace the CAs, then you need DANE, and for DANE to work, browsers have to support it.
[ Parent | on HN ]
Re:Around 293 intermediate CAs in violation of CA/Browser gu... by _-___________-_ on Friday July 10, 2020 @02:51AM (#23788884)
That can indeed be a goal, but DNSSEC is useful even without DANE.
[ Parent | on HN ]
Re:Around 293 intermediate CAs in violation of CA/Browser gu... by tptacek on Saturday July 11, 2020 @11:53AM (#23803075)
(a) No it can't be, and (b) that's not what this thread was about.
[ Parent | on HN ]