Re:Comcast Shot Themselves in the Foot with MTA-STS
by tptacek on Wednesday January 19, 2022 @06:34PM
(#30002035)
We would not. There'd be no reason to have MTA-STS if there was universal DNSSEC deployment. Of course, outages like this would be vastly more common, because DNSSEC includes a large superset of the failure modes of MTA-STS.
But if the ecosystem as a whole was happy about DNSSEC and DANE, it's somewhat doubtful we'd have both specs and the involvement of https.