[dns-operations] DNSSEC DANE testing

Mark Andrews marka at isc.org
Tue Jul 31 02:06:24 UTC 2012

In message <201207302133.q6ULXYgB000723 at calcite.rhyolite.com>, Vernon Schryver 
> Is there something somewhere (preferably a browser) that can check
> (preferably use to make a TLS connection) TLSA records ?
> I've found various things that check various DNSSEC related records,
> but none that handle the TLSA records defined in the IESG approved
> Proposed Standard
> https://www.ietf.org/mail-archive/web/ietf-announce/current/msg10378.html
> https://tools.ietf.org/html/draft-ietf-dane-protocol-23
> I hope I've become even more stupid and blind than I realize.  The
> TLSA RRs I've published are probably stupid nonsense, but the IETF
> rules that I once thought I understood required at least two independent
> implementations before a standard could get out of a WG.

There is no requirement for there to even be one implementation.
> Vernon Schryver    vjs at rhyolite.com
> _______________________________________________
> dns-operations mailing list
> dns-operations at lists.dns-oarc.net
> https://lists.dns-oarc.net/mailman/listinfo/dns-operations
> dns-jobs mailing list
> https://lists.dns-oarc.net/mailman/listinfo/dns-jobs
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: marka at isc.org

More information about the dns-operations mailing list