search

wireapp / wire

:wavy_dash: Overview of the open source code for Wire
https://wire.com
GNU General Public License v3.0
2.41k stars 174 forks source link

DNSSEC on wire.com #328

Open bmwhocking opened 5 years ago

bmwhocking commented 5 years ago

Hello,

I noticed wire.com doesn't validate via DNSSEC, despite the web server & app appearing to now have DNSSEC checks in place.

Wondered if this is still on the road map, it appeared to be in 2017. Understand that AWS route 55 don't support DNSSEC so this may be changeling for you.

Thank you in advance for any thoughts,

Ben

raphaelrobert commented 5 years ago

Hi @bmwhocking,

You are right, it is a limitation of AWS. We use certificate pinning at the leaf level to make sure the Wire apps connect to the right servers.