On 8 apr 2013, at 16:58, Viktor Dukhovni <[email protected]> wrote:

> 
> In https://tools.ietf.org/html/draft-ietf-dane-srv-02#section-3.2 we have:
> 
>   The client SHALL construct the TLSA query name as described in
>   [RFC6698] section 3, based on fields from the SRV record: port from
>   the SRV RDATA, protocol from the SRV query name, and the TLSA base
>   domain is the SRV target host name.
> 
> thus in case a target hostname in the SRV RR is a CNAME:

According to RFC 2782, the SRV target hostname MUST NOT be an alias (aka CNAME).

        jakob

_______________________________________________
dane mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/dane

Reply via email to