Re: [dane] dual use of TLSA RR
Viktor Dukhovni <ietf-dane@dukhovni.org> Fri, 10 October 2014 15:27 UTC
Return-Path: <ietf-dane@dukhovni.org>
X-Original-To: dane@ietfa.amsl.com
Delivered-To: dane@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 32D1D1A1A1D for <dane@ietfa.amsl.com>; Fri, 10 Oct 2014 08:27:53 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.9
X-Spam-Level:
X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id pE3obv1IWpqq for <dane@ietfa.amsl.com>; Fri, 10 Oct 2014 08:27:51 -0700 (PDT)
Received: from mournblade.imrryr.org (mournblade.imrryr.org [38.117.134.19]) (using TLSv1.1 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BB60D1A1A3F for <dane@ietf.org>; Fri, 10 Oct 2014 08:27:51 -0700 (PDT)
Received: by mournblade.imrryr.org (Postfix, from userid 1034) id B10272AB2A7; Fri, 10 Oct 2014 15:27:50 +0000 (UTC)
Date: Fri, 10 Oct 2014 15:27:50 +0000
From: Viktor Dukhovni <ietf-dane@dukhovni.org>
To: dane@ietf.org
Message-ID: <20141010152750.GY13254@mournblade.imrryr.org>
References: <5436AB8A.2090202@riseup.net> <20141009162752.GS13254@mournblade.imrryr.org> <5437F908.4050000@riseup.net>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Disposition: inline
In-Reply-To: <5437F908.4050000@riseup.net>
User-Agent: Mutt/1.5.23 (2014-03-12)
Archived-At: http://mailarchive.ietf.org/arch/msg/dane/u1wWA18c3XZ1k9oKSFiovJHJ91s
Subject: Re: [dane] dual use of TLSA RR
X-BeenThere: dane@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
Reply-To: some-other-list@example.net
List-Id: DNS-based Authentication of Named Entities <dane.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dane>, <mailto:dane-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dane/>
List-Post: <mailto:dane@ietf.org>
List-Help: <mailto:dane-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dane>, <mailto:dane-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 10 Oct 2014 15:27:53 -0000
On Sat, Oct 11, 2014 at 02:19:36AM +1100, shmick@riseup.net wrote: > i signed my zonefile ok and have the following: > > _25._tcp.ns1.example.net. IN CNAME tlsa311._dane.example.net. > > tlsa311._dane.example.net. IN TLSA 3 1 1 > 4e02a17b48f8dd3fb451871222278d248c3f51ea5f25ec2e06f65096c80391b0 ; ECC > > tlsa311._dane.example.net. IN TLSA 3 1 1 > 9ff5a335ddb86c368a9b3fc49d1a81f738d57f8f8f96c973e87513bbf24532c3 ; RSA Note this thread is no longer on topic for DANE WG discussion (if it ever was). This is an IEF working group, not a help forum. You can ask routine operational questions on postfix-users or a DNS users list (if there is one). > im waiting for confirmation from somebody that they see "Verified TLS > conn..." Rather unlikely, with the domain name obfuscated as example.net. -- Viktor.
- [dane] dual use of TLSA RR shmick@riseup.net
- Re: [dane] dual use of TLSA RR Viktor Dukhovni
- Re: [dane] dual use of TLSA RR shmick@riseup.net
- Re: [dane] dual use of TLSA RR Viktor Dukhovni