On Mon, Sep 21, 2020 at 08:09:25AM +0000, pat...@patpro.net wrote: > Just to ensure I've understood this well: if I'm using "3 1 1" I don't > need to change anything, right?
Correct. But in that case, see:
https://mail.sys4.de/pipermail/dane-users/2018-February/000440.html
which describes key rollover recommendations for "3 1 1".
I expect to have code soon for robust integration of DANE "3 1 1" with
EFF's "certbot" for Let's Encrypt.
--
Viktor.
