Re:Transport Security for Recursive to Authoritative DNS
by ate53 on Friday January 21, 2022 @07:05PM
(#30031636)
> On the TLSA side, the argument is roughly that (1) the WebPKI is bad ...
Is that a common argument? I've seen it argued that WebPKI shouldn't be used because it outsources DNS trust to the CAB forum, but not "WebPKI is bad".
Is that a common argument? I've seen it argued that WebPKI shouldn't be used because it outsources DNS trust to the CAB forum, but not "WebPKI is bad".