Archives
Archives
| From: | Maxim Kammerer <mk@×××.su> | ||
|---|---|---|---|
| To: | gentoo-dev@l.g.o | ||
| Subject: | Re: [gentoo-dev] DNSSEC (w/ DLV) live on *.dev.gentoo.org | ||
| Date: | Mon, 07 Jan 2013 23:20:00 | ||
| Message-Id: | CAHsXYDDS+Mh7MPd=U7t9vF09iUPbFRiMVVtOYQ-92qyD=z6VPQ@mail.gmail.com | ||
| In Reply to: | Re: [gentoo-dev] DNSSEC (w/ DLV) live on *.dev.gentoo.org by "Robin H. Johnson" |
||
| 1 | On Mon, Jan 7, 2013 at 10:59 PM, Robin H. Johnson <robbat2@g.o> wrote: |
| 2 | > Firefox: |
| 3 | > Plugin needed: |
| 4 | > https://os3sec.org/ |
| 5 | |
| 6 | Doesn't work for me (no effect), stalls browser for long periods of time. |
| 7 | |
| 8 | > Chrome: |
| 9 | > Already included in stock, see |
| 10 | > http://www.imperialviolet.org/2011/06/16/dnssecchrome.html |
| 11 | |
| 12 | What seems to be included now is support for TYPE257 records, not DANE. |
| 13 | So https://dnssec.imperialviolet.org/ works, but I don't have success |
| 14 | with sites listed at |
| 15 | http://www.internetsociety.org/deploy360/resources/dane-test-sites/. |
| 16 | |
| 17 | At least DANE can be enabled for CA-based certificates, providing a |
| 18 | migration path. |
| 19 | |
| 20 | -- |
| 21 | Maxim Kammerer |
| 22 | Liberté Linux: http://dee.su/liberte |