rlaa...@wiktel.com said:
> CNAMEs don't really help. Certificate validation uses the original name
> anyway.

I was assuming we could intercept the CNAME and use that for certificate 
validation.  Maybe I should have said SRV or TXT or ???

The normal  getaddrinfo and friends automatically follow CNAMEs.  Thus my 
comment about needing some DNS code.


-- 
These are my opinions.  I hate spam.



_______________________________________________
devel mailing list
devel@ntpsec.org
http://lists.ntpsec.org/mailman/listinfo/devel

Reply via email to