Re: DANE with own CA

[Benny Pedersen]

Lefteris Tsintjelis skrev den 2019-06-14 21:18:
On 14/6/2019 22:15, Benny Pedersen wrote:
Lefteris Tsintjelis skrev den 2019-06-14 20:54:
Is there a way to check from logs or headers if DANE was used
(un)successfully and possibly monitor the method as well?

grep Verified in logs

This could very well be from the "known" CAs

indeed yes, but why is it a problem ?

imho if you want to untrust known ca, please do then, its not really a 
dane problem

correct me if its not true, still like to learn