[Cryptography] New SSL/TLS certs to each live no longer than 47 days by 2029

[Christian de Larrinaga]

Shreyas Zare via cryptography <cryptography at metzdowd.com> writes:

>
>> *That* is what certificates protect against.  DNSSEC will not help
>> you at all because as long as you are connected to my hot spot, I
>> control the entire Internet from your point of view, not just DNS.
>
> DNSSEC will help protect with DANE. Controlling a hot spot does not
> make it vulnerable.
>
> Its about time web browsers add support for DANE as an alternative
> option for people who want to use it.
>
> Regards,
> *Shreyas Zare*

DNSSEC signing a zone to the root is needed first? 



-- 
Christian de Larrinaga