On Fri, 15 Apr 2016, Christian Kivalo wrote:
One would think so, but: I asked my main domain provider
domaindiscount24
which introduced DNSSEC last year when they will offer TLSA, DS and
SSHFP
records also. Their answer: Currently the requested features aren't
available and we can make no statement if and when they will be
available.
Actually I don't understand this. They did the major task of
implementing
DNSSEC and aren't able to offer the 3 most important DNS types to
actually
get a benefit from DNSSEC.
You could still just switch to a provider that offers what you need and tell
them why. That takes some time and effort but it's worth it.
Probably won't change much but you get the features you want.
I did that some time ago, my former provider still hasn't changed anything but
i don't cae anymore.
I did so for my private mail domain. But each provider has advantages and
drawbacks. I hope that constant nagging will help, so they'll offer TLSA
records.
So anybody: Ask your provider for DNSSEC and the necessary records for
DANE if not offered yet! :-)
Ciao
--
http://www.dstoecker.eu/ (PGP key available)
