Don't have an account? Sign up
If you're already signed up, please sign in
TLSA / DANE — a DNSSEC-protected TLSA record that binds a service endpoint to an allowed TLS certificate or public key under DANE.
The record value is published at a specific owner name in the authoritative DNS zone and cached for its TTL. Data format, coexistence with other records, and response behavior are defined by the record type and its applicable specification.
TLSA / DANE — a DNSSEC-protected TLSA record that binds a service endpoint to an allowed TLS certificate or public key under DANE.
It is placed at the required name in an authoritative zone to provide resolvers and applications with a particular type of data. The recipient interprets the record fields according to that type’s format.
Verify the owner name, type, value, TTL, and the response from every authoritative server. Observe format restrictions and distinguish a missing record from a cached old value.
