On Tue, Apr 25, 2023 at 01:02:28PM +0100, Q Misell via tor-dev wrote: > Security Considerations: > The second layer descriptor is encrypted and MACed in a way that only a > party > with access to the secret key of the hidden service could manipulate what is > published there. Therefore, Tor CAA records have at least the same security > as > those in the DNS secured by DNSSEC.
Did you mean "signed"? If it's just encrypted and MACed, then anyone who can decrypt and check the MAC can also alter the contents, of course. _______________________________________________ tor-dev mailing list tor-dev@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-dev
