I had not heard of DANE (DNS based authentication of named entities). I found found rfc-6698 in a search .. not sure if anyone mentioned it yet. https://datatracker.ietf.org/doc/rfc6698/
On Thu, Dec 4, 2014 at 12:15 PM, Joe Polcari <j...@polcari.com> wrote: > To me, that's a good reason for things to stop working. > > -----Original Message----- > From: discuss-bounces+joe=polcari....@blu.org > [mailto:discuss-bounces+joe=polcari....@blu.org] On Behalf Of Richard > Pieri > Sent: Thursday, December 04, 2014 12:00 PM > To: discuss@blu.org > Subject: Re: [Discuss] free SSL certs from the EFF > > On 12/4/2014 11:36 AM, Derek Martin wrote: > > Come on man, this statement is very obviously false. It only needs to > > be turned off in very specific, very limited circumstances, namely > > when you MUST do whatever you're doing RIGHT NOW, AND you can't find a > > reasonable alternative, like doing your work from a starbucks (or > > other hotspot or whatever) across the street, AND the consequences of > > not doing it RIGHT NOW are worse than the risk of getting hacked... > > > > ..which is like, never. > > Sure, I get that. > > Joe Average, on the other hand, probably doesn't care about that. He > cares that his month-end report is due in 5 minutes and his mail hangs > every time he presses "send". DNSSEC validation may be protecting him > from getting his mail hacked but it's doing so by preventing him from > getting any of his work done. I call that a case of the cure being worse > than the illness. > > -- > Rich P. > _______________________________________________ > Discuss mailing list > Discuss@blu.org > http://lists.blu.org/mailman/listinfo/discuss > > _______________________________________________ > Discuss mailing list > Discuss@blu.org > http://lists.blu.org/mailman/listinfo/discuss > _______________________________________________ Discuss mailing list Discuss@blu.org http://lists.blu.org/mailman/listinfo/discuss