[Unbound-users] local control socket; www.unbound.net certificate

[Paul Wouters]

On Wed, 1 Dec 2010, Leen Besselink wrote:

> Chromium does have the --enable-dnssec-certs option so that is a start,
> but it's experimental.

What does that option do? As there is no real standard yet...

> I think OpenSSH is the only application at this point which supports the
> dnssec and in this case with SSHFP-RR.

openswan supports raw RSA keys for IPsec in DNS.

> DNSSEC can be used for so much more.

It's coming, but it will take a few more months.

Paul