>>>>> "PH" == Paul Hoffman <[email protected]> writes:

PH> Proposal: we take this off the DANE list and keep it on therightkey
PH> list, focused on DS instead of DANE.

+1  TLSA is only one relevant vector for dnssec attacks.  Any such
discussion should be more general.  And tracking DS RRs feels like
enough to provide tamper evidence, at least.

-JimC
-- 
James Cloos <[email protected]>         OpenPGP: 1024D/ED7DAEA6
_______________________________________________
dane mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/dane

Reply via email to