[dns-operations] DNSSEC DANE testing

[Vernon Schryver]

Is there something somewhere (preferably a browser) that can check
(preferably use to make a TLS connection) TLSA records ?
I've found various things that check various DNSSEC related records,
but none that handle the TLSA records defined in the IESG approved
Proposed Standard

https://www.ietf.org/mail-archive/web/ietf-announce/current/msg10378.html
https://tools.ietf.org/html/draft-ietf-dane-protocol-23

I hope I've become even more stupid and blind than I realize.  The
TLSA RRs I've published are probably stupid nonsense, but the IETF
rules that I once thought I understood required at least two independent
implementations before a standard could get out of a WG.


Vernon Schryver    vjs at rhyolite.com