disclose / dnssecuritytxt

A standard allowing organizations to nominate security contact points and policies via DNS TXT records.
https://dnssecuritytxt.org
MIT License
31 stars 7 forks source link

Suggestion: do not use the apex approach for deployment #12

Open mdavids opened 1 year ago

mdavids commented 1 year ago

See 'txt cnn.com'

The apex is already polluted enough as it is. I suggest to only use use the underscored node name '_security'. (normative reference could be: RFC8552)

yosignals commented 1 month ago

Hey @mdavids - I just saw this now! (Yikes)

We had this discussion here https://github.com/disclose/dnssecuritytxt/issues/3