The text on the delegation token is over-prescriptive, what about mandating DNSSEC and CT logs.
Brian Sniffen notes that doing such checks is likely to violate the don't-stand-out requirement.
The whole concept of delegation tokens probably needs more work.
The text on the delegation token is over-prescriptive, what about mandating DNSSEC and CT logs. Brian Sniffen notes that doing such checks is likely to violate the don't-stand-out requirement. The whole concept of delegation tokens probably needs more work.