Oh, sorry, I'm dim. On Thu, Mar 14, 2013 at 08:13:45PM +0000, Viktor Dukhovni wrote:
> Yes, if both are validated, but not otherwise, in particular a > validated CNAME to a not validated TLSA RRset is not validated and > the combination bevahes indistinguishably from "NODATA", undoubtedly > some folks will keep getting surprised by this. Perhaps. I'd call that a "feature", though. A -- Andrew Sullivan [email protected] _______________________________________________ dane mailing list [email protected] https://www.ietf.org/mailman/listinfo/dane
