Oh, sorry, I'm dim. On Thu, Mar 14, 2013 at 08:13:45PM +0000, Viktor Dukhovni wrote:
> Yes, if both are validated, but not otherwise, in particular a > validated CNAME to a not validated TLSA RRset is not validated and > the combination bevahes indistinguishably from "NODATA", undoubtedly > some folks will keep getting surprised by this. Perhaps. I'd call that a "feature", though. A -- Andrew Sullivan a...@anvilwalrusden.com _______________________________________________ dane mailing list dane@ietf.org https://www.ietf.org/mailman/listinfo/dane
