SamePlace

  1. Bug #308181
  2. Comment #126

Comment 126 for bug 308181

Revision history for this message
In , L. David Baron (dbaron) wrote :

(In reply to comment #36)
> I don't see that it's necessary to wait for DNSSEC to implement that. DNSSEC
> will deploy when it deploys and we'll get the extra security bump when it shows
> up.

I'd agree that it's not necessary to wait for DNSSEC if all servers found in this manner require SSL/TLS (i.e., the connection is configured to fail if TLS can't be initiated or if the cert doesn't match).