[dns-operations] DNSSEC DANE testing

[Mark Andrews]

In message <201207302133.q6ULXYgB000723 at calcite.rhyolite.com>, Vernon Schryver 
writes:
> Is there something somewhere (preferably a browser) that can check
> (preferably use to make a TLS connection) TLSA records ?
> I've found various things that check various DNSSEC related records,
> but none that handle the TLSA records defined in the IESG approved
> Proposed Standard
> 
> https://www.ietf.org/mail-archive/web/ietf-announce/current/msg10378.html
> https://tools.ietf.org/html/draft-ietf-dane-protocol-23
> 
> I hope I've become even more stupid and blind than I realize.  The
> TLSA RRs I've published are probably stupid nonsense, but the IETF
> rules that I once thought I understood required at least two independent
> implementations before a standard could get out of a WG.

There is no requirement for there to even be one implementation.
 
> Vernon Schryver    vjs at rhyolite.com
> _______________________________________________
> dns-operations mailing list
> dns-operations at lists.dns-oarc.net
> https://lists.dns-oarc.net/mailman/listinfo/dns-operations
> dns-jobs mailing list
> https://lists.dns-oarc.net/mailman/listinfo/dns-jobs
-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: marka at isc.org