Hacker News new | past | comments | ask | show | jobs | submit login

DANE without DNSSEC isn't a good idea. DoH secures the connection between the user's device and their recursive resolver, but it cannot secure the connection between the recursive resolver and the authoritative name servers. If you're using DANE you need a stronger guarantee that the records are valid.



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: