10 Apr
2018
10 Apr
'18
5:14 p.m.
Please read the TLS WG consensus call thread on the DNSSEC chain extension, and comment for either publish as-is or the changes I and others are advocating (which IMHO are needed for plausible utility in the web space).
Thread:
https://www.ietf.org/mail-archive/web/tls/current/threads.html#25929
Rationale for change:
https://www.ietf.org/mail-archive/web/tls/current/msg25936.html
Why proposed pinning TTL is analogous to STS and not HPKP:
https://www.ietf.org/mail-archive/web/tls/current/msg25956.html
--
Viktor.