[Discuss] free SSL certs from the EFF

[johnhall2.0 at gmail.com (John Hall)]

I had not heard of DANE (DNS based authentication of named entities). I
found found rfc-6698 in a search .. not sure if anyone mentioned it yet.
https://datatracker.ietf.org/doc/rfc6698/



On Thu, Dec 4, 2014 at 12:15 PM, Joe Polcari <Joe at polcari.com> wrote:

> To me, that's a good reason for things to stop working.
>
> -----Original Message-----
> From: discuss-bounces+joe=polcari.com at blu.org
> [mailto:discuss-bounces+joe=polcari.com at blu.org] On Behalf Of Richard
> Pieri
> Sent: Thursday, December 04, 2014 12:00 PM
> To: discuss at blu.org
> Subject: Re: [Discuss] free SSL certs from the EFF
>
> On 12/4/2014 11:36 AM, Derek Martin wrote:
> > Come on man, this statement is very obviously false.  It only needs to
> > be turned off in very specific, very limited circumstances, namely
> > when you MUST do whatever you're doing RIGHT NOW, AND you can't find a
> > reasonable alternative, like doing your work from a starbucks (or
> > other hotspot or whatever) across the street, AND the consequences of
> > not doing it RIGHT NOW are worse than the risk of getting hacked...
> >
> > ..which is like, never.
>
> Sure, I get that.
>
> Joe Average, on the other hand, probably doesn't care about that. He
> cares that his month-end report is due in 5 minutes and his mail hangs
> every time he presses "send". DNSSEC validation may be protecting him
> from getting his mail hacked but it's doing so by preventing him from
> getting any of his work done. I call that a case of the cure being worse
> than the illness.
>
> --
> Rich P.
> _______________________________________________
> Discuss mailing list
> Discuss at blu.org
> http://lists.blu.org/mailman/listinfo/discuss
>
> _______________________________________________
> Discuss mailing list
> Discuss at blu.org
> http://lists.blu.org/mailman/listinfo/discuss
>