undefined | Better HN

0 pointsbrody_hamer4mo ago0 comments

> a dns record that specifies the domain to use for oidc for emails on that domain.

Oooh I like this idea!

0 comments

Not a DNS record, no one uses dnssec so DNS is insecure. A .well-known path, with a TLS cert is better. Or a special subdomain, like MTA-STS uses.

j / k navigate · click thread line to collapse

0 pointsbrody_hamer4mo ago0 comments

> a dns record that specifies the domain to use for oidc for emails on that domain.

Oooh I like this idea!

Not a DNS record, no one uses dnssec so DNS is insecure. A .well-known path, with a TLS cert is better. Or a special subdomain, like MTA-STS uses.

j / k navigate · click thread line to collapse