News for hackers. Stuff that matters.

A comment on Calling time on DNSSEC: The costs exceed the benefits. Parent comment

Re:Calling time on DNSSEC: The costs exceed the benefits by NavinF on Saturday June 03, 2023 @02:54PM (#36179469)
DANE isn't happening. Browsers tried a decade ago and gave up: https://www.imperialviolet.org/2015/01/17/notdane.html
[ Parent | on HN ]
Re:Calling time on DNSSEC: The costs exceed the benefits by redprince on Saturday June 03, 2023 @05:24PM (#36180670)
> DANE isn't happening. Browsers tried a decade ago and gave up

DANE was never limited to browsers. Example:

https://ssl-tools.net/mailservers/proton.me

Though support in that space is very patchy as well and maybe going nowhere. In any case, it serves as an example that DNSSEC can be built upon, even if the new ideas don't necessarily make it.

[ Parent | on HN ]
Re:Calling time on DNSSEC: The costs exceed the benefits by tptacek on Saturday June 03, 2023 @05:49PM (#36180847)
The major mail vendors came up with MTA-STS specifically to avoid having to roll out DNSSEC.
[ Parent | on HN ]