DNSSEC & DANE TLSA records

Steffen Vogel's Avatar

Steffen Vogel

01 May, 2015 12:46 PM

GPGTools Website

The official GPGTools website is secured by HTTPS.
Unfortunately the DNS zone of the website isn't secured by DNSSEC.
Therefore the HTTPS certificate can't be validated by DANE TLSA records (records are missing).
The only way to trust the website is in trusting the certificate authority.

What did you expect instead

A DNSSEC secured gpgtools.org zone
TLSA records to validate the HTTPS certificate

  1. Support Staff 1 Posted by Mento on 04 May, 2015 11:22 AM

    Mento's Avatar

    Hallo Steffen,

    meine Meinung zu DNSSEC deckt sich etwa mit der von Uberspace. Wir haben keinen Plan in naher Zukunft auf DANE zu setzen.

    Grüße, Mento

  2. Steve closed this discussion on 02 Jun, 2015 12:32 PM.

Comments are currently closed for this discussion. You can start a new one.

Keyboard shortcuts

Generic

? Show this help
ESC Blurs the current field

Comment Form

r Focus the comment reply box
^ + ↩ Submit the comment

You can use Command ⌘ instead of Control ^ on Mac