Editorial question57.5K views3,612 votes0 answers2,800 following
AI-generatedDoes OpenSSL perform internal DNSSEC validation for DANE TLSA records?
DANE Validation and DNSSEC Dependency OpenSSL provides experimental support for DNS-based Authentication of Named Entities (DANE) via the -dane flag in s_client . This feature allows the client to retrieve TLSA records to verify TLS certificates, reducing reliance on traditional Certificate Authorities. A critical requirement for DANE security is the authent
openssl