Transport Security for Recursive to Authoritative DNS

Posted by tomwas54 on Friday January 21, 2022 @02:16PM
from the educatedguesswork.org dept.

https://educatedguesswork.org/posts/dns-security-adox/

( 1 comment | 6 points | on HN )

Re:Transport Security for Recursive to Authoritative DNS by ate53 on Friday January 21, 2022 @07:05PM (#30031636)

> On the TLSA side, the argument is roughly that (1) the WebPKI is bad ...

Is that a common argument? I've seen it argued that WebPKI shouldn't be used because it outsources DNS trust to the CAB forum, but not "WebPKI is bad".

[ Parent | on HN ]