dane – Page 2 – WindowsTechs.com

Security of DNSSEC without NSEC

Posted on November 16, 2016 by yyy

DNSSEC uses NSEC (or NSEC3) records to indicate that requested domain name does not exist. NSEC has been criticized because it allows zone enumeration.

What breaks, if dnssec is implemented without nsec records, that is, wha… Continue reading Security of DNSSEC without NSEC→

With DNSSEC, is there any benefit in DANE for a CA- issued Cert?

Posted on March 27, 2015 by goodguys_activate

I just deployed DNSSEC at val-id.com and getvalid.com

Since DNSSEC is a requirement of DANE, and I have a CA-based certificate, can I show my support for DANE-based deployments by publishing my CA-based cert into DNS?

My co… Continue reading With DNSSEC, is there any benefit in DANE for a CA- issued Cert?→