On Feb 25, 2019, at 5:20 AM, Bill Woodcock <wo...@pch.net> wrote: > We know that neither Comodo nor Let's Encrypt were DNSSEC validating before > issuing certs.
I’d like to clarify that Let’s Encrypt has always validated DNSSEC, dating to before we issued our first publicly trusted certificate in September 2015. -- James Renken (pronouns: he/him) Internet Security Research Group Let's Encrypt: A Free, Automated, and Open CA