Viktor, I am looking for a switch in posttls-finger to tell it where (read: nameservr) to lookup TLSA RRs.
Problem is: I've updated my zone, but I posttls-finger doesn't seem to 'see' that because my local resolver has cached the DNS zones information. Is there an option I didn't see? A better way to handle this? p@rick -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 Franziskanerstraße 15, 81669 München Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263 Vorstand: Patrick Ben Koetter, Axel von der Ohe, Marc Schiffbauer Aufsichtsratsvorsitzender: Florian Kirstein