Re:DNSSEC KSK rollover breaks DNS resolution for .nz domains
by nickf on Tuesday May 30, 2023 @05:34AM
(#36122879)
You can't, but a certificate that isn't logged won't work for the overwhelming majority of practical use-cases (ie any Google or Apple owned product).
If you need a certificate that doesn't care about those, you perhaps don't need a publicly-trusted certificate in the first place.
[ Parent
| on HN ]
There are no comments on this comment yet.