Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

> example.com. IN CAA 0 issue "letsencrypt.org; validationmethods=dns-01"

I have a domain with configured DNSSEC. Would publishing this make me as secure as publishing an accounturi? Would LetsEncrypt strictly disregard any non-DNSSEC queries to a DNSSEC domain?



The article states that Let’s Encrypt uses a validating resolver, so yes.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: