On Mon, Apr 12, 2021 at 10:44:12AM -0400, Phillip Hallam-Baker wrote:
> Ten years after DANE started, my very very large Web hosting provider I use
> for my secondary hosting does not support TLSA records. And they appear to
> have no plans to do so.
Not surprising, none of the browsers support TLSA records, so there's
little point in publishing them for web services.
> And there are tens of thousands of other similar businesses that have
> no plans to implement TLSA because doing so is simply going to take
> revenue out of their pocket.
There's no revenue loss, but whatever, since there's no point at
present.
> They sell domains at cost and they only make profits from added value
> services, the biggest of which is selling SSL certificates.
Which Let's Encrypt sells for $0. Their customers will eventually
figure this out.
--
Viktor.
