Re: Network security manager

[Ted Zlatanov]

On Tue, 18 Nov 2014 21:50:36 +0100 Toke Høiland-Jørgensen <address@hidden> 
wrote: 

TH> Well, DANE allows for storing certificate info in DNS and verifying its
TH> integrity with DNSSEC. This has the nice property that no CA is needed,
TH> and can give as good or stronger guarantees on cert integrity as
TH> verifying against a CA can.

TH> The downside is that it's not terribly widely deployed yet, and also
TH> that it requires working DNSSEC support to work.

I think it makes sense as a feature for later, definitely.

Ted