Re: Importance of keeping DANE TLSA records correct.

2015-08-22 Thread Alice Wonder
On 08/22/2015 08:30 AM, Viktor Dukhovni wrote: It is best to hold off on posting gut instict reactions. Get acquainted with the problem, think about the issues for some weeks or months, come back later and share what you've learned. Quit being so damn arrogant. Seriously. Geez and I tho

Re: Importance of keeping DANE TLSA records correct.

2015-08-22 Thread Viktor Dukhovni
On Sat, Aug 22, 2015 at 07:42:45AM -0700, Alice Wonder wrote: > >If you don't create README files in your certificate directory, > >add comments to Postfix configuration files, or otherwise create > >reminders for yourself to not forget to do it right, perhaps DANE > >is not right for you. "Deplo

Re: Importance of keeping DANE TLSA records correct.

2015-08-22 Thread lst_hoe02
Zitat von Viktor Dukhovni : Until now, most DANE deployments have been on small hobbyist machines, by people who mostly don't correspond with each other. So if a particular domain's TLSA RRs were broken, nobody noticed. This is about to change. The German email providers web.de and gmx.de hav

Re: Importance of keeping DANE TLSA records correct.

2015-08-22 Thread Alice Wonder
On 08/22/2015 07:42 AM, Alice Wonder wrote: On 08/22/2015 06:23 AM, Viktor Dukhovni wrote: Until now, most DANE deployments have been on small hobbyist machines, by people who mostly don't correspond with each other. So if a particular domain's TLSA RRs were broken, nobody noticed. This is

Re: Importance of keeping DANE TLSA records correct.

2015-08-22 Thread Alice Wonder
On 08/22/2015 06:23 AM, Viktor Dukhovni wrote: Until now, most DANE deployments have been on small hobbyist machines, by people who mostly don't correspond with each other. So if a particular domain's TLSA RRs were broken, nobody noticed. This is about to change. The German email providers we

Importance of keeping DANE TLSA records correct.

2015-08-22 Thread Viktor Dukhovni
Until now, most DANE deployments have been on small hobbyist machines, by people who mostly don't correspond with each other. So if a particular domain's TLSA RRs were broken, nobody noticed. This is about to change. The German email providers web.de and gmx.de have announced upcoming DANE suppor