[getdns-users] Does stubby honor TLSA records when verifying tls_auth_name?

Christoph cm at appliedprivacy.net
Thu Apr 18 19:40:00 CEST 2019


> We didn't publish SPKI pins because we rotate keys - which makes
> SPKI less practical.

After noticing that the pin can also be at the CA level we
will provide SPKI pins. The DANE/TLSA question for Stubby
would still be interesting since that would allow us to
manage the "pins" without changing the configuration.

thanks,
Christoph


More information about the Users mailing list