Sure. But if it's used only for DoH/DoT queries inside a DNS resolver, its deplo... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		cyberax 6 months ago \| parent \| context \| favorite \| on: Why do we need DNSSEC? Sure. But if it's used only for DoH/DoT queries inside a DNS resolver, its deployment path is more realistic than adding DANE to all the TLS clients.

tptacek 6 months ago [–]

Right, I agree with that narrow point, but it seems clear to me that neither is going to happen; I think DANE is a dead letter.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact