[Unbound-users] local control socket; www.unbound.net certificate

Paul Wouters paul at xelerance.com
Wed Dec 1 03:12:19 UTC 2010

On Wed, 1 Dec 2010, Leen Besselink wrote:

> Chromium does have the --enable-dnssec-certs option so that is a start,
> but it's experimental.

What does that option do? As there is no real standard yet...

> I think OpenSSH is the only application at this point which supports the
> dnssec and in this case with SSHFP-RR.

openswan supports raw RSA keys for IPsec in DNS.

> DNSSEC can be used for so much more.

It's coming, but it will take a few more months.


More information about the Unbound-users mailing list