Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

You could also just skip the CA part, and use DANE. Just publish the key in your DNS, and the corresponding self-signed certificate in your server.

Are there any DANE compatible clients today?



No. DANE is a dead letter standard.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: