>>>>> "VD" == Viktor Dukhovni <[email protected]> writes:

VD> If you publish usage 0, you will not interoperate with Postfix,
VD> which accounts for a large fraction of the MTAs on the Internet.

I thought that you previously wrote that, in the absense of of CAfile
setting, postfix would treat 0/1 like 2/3?  Or did I miss a change?

Ian:  Given the above, my earlier post suggesting type 0 would do
      should be amended to suggest a type 2 for _25._tcp.

      I still would choose 2 rather than 3 in your case, since you can
      issue new ee certs signed by that CA at will.  Saving the hassle
      of updating the DNS every time that occurs is a good plan.

-JimC
-- 
James Cloos <[email protected]>         OpenPGP: 1024D/ED7DAEA6
_______________________________________________
dane mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/dane

Reply via email to