[Discuss] free SSL certs from the EFF

[Derek Atkins]

John Hall <johnhall2.0 at gmail.com> writes:

> I had not heard of DANE (DNS based authentication of named entities). I
> found found rfc-6698 in a search .. not sure if anyone mentioned it yet.
> https://datatracker.ietf.org/doc/rfc6698/

I didn't mention DANE, but it is indeed one of the "additional things" I
was going to mention.  Along with TLSA.  Leveraging DNSSEC one can
provide authoritative bindings to other infrastructure and let clients
know that they should be using TLS and which certs or CAs they should be
using for it.

-derek

-- 
       Derek Atkins, SB '93 MIT EE, SM '95 MIT Media Laboratory
       Member, MIT Student Information Processing Board  (SIPB)
       URL: http://web.mit.edu/warlord/    PP-ASEL-IA     N1NWH
       warlord at MIT.EDU                        PGP key available