Re: Cert in DNS (DANE, DNSSEC) and OpenSSL

2013-01-28 Thread Bry8 Star
SUGI, i think you do not know that/future for sure. Neither do i. Your assessment is wrong, below is why... Most likely, bit more knowledgeable & active person(s) will be required, for to handle and configure DNSSEC/DANE, so such people will be hired by companies, AND/or new services will be pro

Re: Cert in DNS (DANE, DNSSEC) and OpenSSL

2013-01-21 Thread koichi sugimoto
I'm afraid that implementing DANE cause new certification vendor not to come into the market. - SUGI 2013/1/10 Bry8 Star > It would be great to see/know what can be used to enable DANE > support in OpenSSL. > > Those who are interested in bit more info on > > DANE (and related) : > > https://da

Re: Cert in DNS (DANE, DNSSEC) and OpenSSL

2013-01-09 Thread Bry8 Star
It would be great to see/know what can be used to enable DANE support in OpenSSL. Those who are interested in bit more info on DANE (and related) : https://datatracker.ietf.org/wg/dane/ https://datatracker.ietf.org/doc/draft-ietf-dane-protocol/ http://www.internetsociety.org/articles/dane-taki

Re: Cert in DNS (DANE, DNSSEC) and OpenSSL

2013-01-09 Thread Jakob Bohm
On 1/9/2013 2:46 PM, Bry8 Star wrote: (reposting this on users list) Hi, When can we expect an OpenSSL release, that will support DANE protocol to verify SSL/TLS certificates (which are added/kept in the DNS RR) using DNSSEC protocols ? Is there an RFC for DANE, or is it still an experimental

Cert in DNS (DANE, DNSSEC) and OpenSSL

2013-01-09 Thread Bry8 Star
(reposting this on users list) Hi, When can we expect an OpenSSL release, that will support DANE protocol to verify SSL/TLS certificates (which are added/kept in the DNS RR) using DNSSEC protocols ? Thanks, -- Bright Star (Bry8 Star / Bry8Star). signature.asc Description: OpenPGP digital signa