I think DANE will help with that. But that's blocked on having enough/easy DNSSEC-capable registrars.
- Taral On Jul 2, 2013 3:26 AM, "Adam Back" <a...@cypherspace.org> wrote: > > I think it time to deprecate non-https (and non-forward secret > ciphersuites.) Compute power has moved on, session cacheing works, > symmetric crypto is cheap.
_______________________________________________ cryptography mailing list cryptography@randombit.net http://lists.randombit.net/mailman/listinfo/cryptography
