What the hey?
For those who don't know:
DNSSEC makes sure you get the correct IP address when you want to connect, while a DANE TLSA record (signed by DNSSEC) will give information about the SSL/TLS certificate you can expect at the specific service you are connecting to. So, perfect forward secrecy.
There's an addon which provides DANE support... but as of FF 57 the API it uses has been removed. And no suitable substitute provided.
Is FF um, -not- the future?
Firefox + DANE?
-
Quantum`
- Posts: 7
- Joined: July 15th, 2015, 1:12 pm
- Location: Seattle, Ecotopia, WA
Firefox + DANE?
Last edited by Quantum` on November 24th, 2017, 6:57 pm, edited 1 time in total.
-
Frank Lion
- Posts: 21178
- Joined: April 23rd, 2004, 6:59 pm
- Location: ... The Exorcist....United Kingdom
- Contact:
Re: Firefox + DANE?
Firefox are only doing SWEDE support atm.
"The only thing necessary for the triumph of evil, is for good men to do nothing." - Edmund Burke (attrib.)
.
.
-
Quantum`
- Posts: 7
- Joined: July 15th, 2015, 1:12 pm
- Location: Seattle, Ecotopia, WA
Re: Firefox + DANE?
Well, being where you are, I can see the joke.
https://en.wikipedia.org/wiki/DNS-based ... d_Entities
https://en.wikipedia.org/wiki/DNS-based ... d_Entities
-
Quantum`
- Posts: 7
- Joined: July 15th, 2015, 1:12 pm
- Location: Seattle, Ecotopia, WA
Re: Firefox + DANE?
So nothing.