News for hackers. Stuff that matters.

A comment on Poll HN: Do you use SSH certificates (not mere public-key authentication)?. Parent comment

Re:Poll HN: Do you use SSH certificates (not mere public-key... by egberts1 on Wednesday August 31, 2022 @04:04PM (#32667640)
Yes. Hesiod is safer than DNS TXT once secured by DNSSEC, because I envision mass blocking of DNS TXT in the near future.
[ Parent | on HN ]
Re:Poll HN: Do you use SSH certificates (not mere public-key... by dotwaffle on Thursday September 01, 2022 @01:56AM (#32672524)
Good luck with that. DNS TXT records are used for a lot of infrastructure right now, from DMARC/SPF/DKIM to DNS-01 validation through LetsEncrypt afaik.
[ Parent | on HN ]
Re:Poll HN: Do you use SSH certificates (not mere public-key... by egberts1 on Friday September 02, 2022 @12:53AM (#32686740)
Yes, and that too will change … again.
[ Parent | on HN ]
Re:Poll HN: Do you use SSH certificates (not mere public-key... by dotwaffle on Thursday September 01, 2022 @06:48PM (#32684386)
Hesiod uses txt records. I am using IN class records too, as I do not have a DNS provider that supports HS class... But that's fine, it works!
[ Parent | on HN ]