Please read the TLS WG consensus call thread on the DNSSEC chain extension, and comment for either publish as-is or the changes I and others are advocating (which IMHO are needed for plausible utility in the web space).
Thread: https://www.ietf.org/mail-archive/web/tls/current/threads.html#25929 Rationale for change: https://www.ietf.org/mail-archive/web/tls/current/msg25936.html Why proposed pinning TTL is analogous to STS and not HPKP: https://www.ietf.org/mail-archive/web/tls/current/msg25956.html -- Viktor. _______________________________________________ dane mailing list dane@ietf.org https://www.ietf.org/mailman/listinfo/dane