Re: DANE, was A Deep Dive on the Recent Widespread DNS Hijacking

[Julien Goodwin]

On 27/2/19 3:10 am, John Levine wrote:
> In article <b68c84d4-9d1a-4303-94ca-59cebfb6b...@pch.net> you write:
>> We need to get switched over to DANE as quickly as possible, and stop 
>> wasting effort trying to keep the CA system alive with
>> ever-hackier band-aids.
> 
> What's the DANE version of a green-bar cert?

You mean the EV certificates that most browsers are removing the distinction 
of, removing their only real justification for existing?

https://www.troyhunt.com/extended-validation-certificates-are-dead/

Not that they were ever actually widely used.

https://www.troyhunt.com/on-the-perceived-value-ev-certs-cas-phishing-lets-encrypt/