-
Pulled out of [#2303](https://github.com/GoogleCloudPlatform/kubernetes/issues/2303#issuecomment-62776961):
Task list:
- [ ] Finish definition of the bootstrap API
- [ ] Implement a new binary/mode f…
-
Thanks to: ietf-dane@dukhovni for the report.
I think that the authoritative server needs to just return
the CNAME data it has (without chasing the CNAME) when the target
of the CNAME does not exis…
-
It seems to me that instead of just a "success count", we should have something like:
starttls-successes
mta-sts-successes
tlsa-successes
or similar. Otherwise, how is a recipient to know how many s…
-
Scenario: "in the future, we will design STSv2".
For compatibility and migration-reasons, I would have to announce both, this might end up in a problem, for older STSv1-only implementations.
I'll mak…
-
This ticket is the roadmap for PHPMailer's future development.
Now that even PHP 5.3 is now EOL, it's about time to make that the minimum supported version rather than 5.0. This necessarily implies B…
-
Hi,
mailinabox.email is protected with DNSSEC but not DANE.
1. `sudo apt-get install hash-slinger`
2. `tlsa --create --port 443 --protocol tcp --output rfc --usage 1 --selector 0 --mtype 1 mailinabox…
renne updated
7 years ago
-
If using DANE/TLSA on mail-server, it is tricky to update keys on DNS. Given the short renewal interval for Lets Encrypt certificates, it would be highly desirable to be able to renew certificates us…
-
compiled with:
```
cargo install --git https://github.com/bluejekyll/trust-dns trust-dns-server --features tls,ring --force
```
/home/trustdns/config.toml
```
listen_addrs_ipv6 = ["2a01:4f8:c0…
-
hi,
is there a possibility of enabling [DANE](https://en.wikipedia.org/wiki/DNS-based_Authentication_of_Named_Entities) on the domain, so the dns response is secured (especially h.fc00.org)?
chpio updated
8 years ago
-
Reporter: ietf-dane@dukhovni
Problem:
```
$ dig +nosplit +norecur -t tlsa _25._tcp.dbdo.se @ns7.binero.se
;; ->>HEADERHEADER