Paul Wouters <[email protected]> wrote:
>
> Well, for "indeterminate", you know that the DNS was very broken, or
> possibly tampered with, and prevented receiving positive or negative
> prove from DNS/TLSA.

No, indeterminate just means you have no trust anchors. Broken/tampered is
bogus.

> To me, the actions to perform for "insecure" versus "indeterminate" are
> quite different.

To me they are equivalent from an app's point of view.

Tony.
-- 
f.anthony.n.finch  <[email protected]>  http://dotat.at/
Forties, Cromarty: East, veering southeast, 4 or 5, occasionally 6 at first.
Rough, becoming slight or moderate. Showers, rain at first. Moderate or good,
occasionally poor at first.
_______________________________________________
dane mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/dane

Reply via email to