Skip to main content
Search type Search syntax
Tags [tag]
Exact "words here"
Author user:1234
user:me (yours)
Score score:3 (3+)
score:0 (none)
Answers answers:3 (3+)
answers:0 (none)
isaccepted:yes
hasaccepted:no
inquestion:1234
Views views:250
Code code:"if (foo != bar)"
Sections title:apples
body:"apples oranges"
URL url:"*.example.com"
Saves in:saves
Status closed:yes
duplicate:no
migrated:no
wiki:no
Types is:question
is:answer
Exclude -[tag]
-apples
For more details on advanced search visit our help page
Results tagged with
Search options answers only not deleted user 37315
6 votes
Accepted

Is DANE-EE TLSA version 3 (Domain-issued certificate from rfc6698) still supported in 2023?

The Wikipedia page for DANE shows that DANE is not supported natively by any major browser. …
Steffen Ullrich's user avatar
2 votes

SSH like promiscuity for HTTPS

What you describe is https with self-signed certificates, i.e. Setup a new server with SSH, it makes it's own keys. Setup a https server with a self-signed certificate. ssh to a new …
Steffen Ullrich's user avatar
3 votes
Accepted

How does the DANE protocol make Certificate Authorities obsolete?

DANE makes it possible for every owner of a domain to publish its certificate inside the DNS, i.e. fully managed by the owner of the domain which is the owner of the certificate. … But, DANE needs DNSSec because otherwise such records could be spoofed which would a major problem with certificates. …
Steffen Ullrich's user avatar
5 votes
Accepted

Is DANE the DNS-variant of HTTP Public Key Pinning (HPKP)?

While both DANE/TLSA and HPKP are somehow related to validation of the server using public keys or certificates, they address different aspects of the validation. … This means DANE can not not considered the DNS equivalent of HPKP. …
Steffen Ullrich's user avatar