-
badmuff
Is there anyone who got knowledge with Dane? My ISP does not support Dane, any chance to include TLS DNS via a different DNS Provider?
-
Menel
I do DANE. You will need a unbroken dnssec chain to your dns records. If your ips does dnssec but not tlsa records you can delegate it to some dns people provider that does. But you'll need dnssec on your domain.
-
Menel
Dns over tls is unrelated to DANE. Not needed
-
badmuff
oh thanks, that sounds promising. searching for some provider which supports dane settings.
-
badmuff
okay found a provider - will transfer domain and check.
-
mirux
> Establishing a secure connection from felix-zauberer.de failed. Certificate hash: 8ac21ef76a31b257e47f6f4d799fc347a067adbe. Error with certificate 0: certificate has expired.
-
Felix
>> Establishing a secure connection from felix-zauberer.de failed. Certificate hash: 8ac21ef76a31b257e47f6f4d799fc347a067adbe. Error with certificate 0: certificate has expired. Fixed
-
drakos
> okay found a provider - will transfer domain and check. i would just switch your nameservers to cloudflare ↺
-
drakos
that's what i did
-
j.r (jugendhacker.de)
drakos: you do not necessarily have to switch to cloudflare to have DANE/TLSA support... there are a lot of other DNS Servers that support it too...
-
drakos
then recommend him some?
-
drakos
he wants to do a domain transfer, which costs money
-
Menel
inwx.de desec.io and I guess our USA friends here also know some. Cloudflare is already a Monopol enough.
-
Menel
gandi.net
-
ukko
Menel, gandi was bought out and went to shit, avoid it
-
ukko
they hiked priced like crazy too
-
Kris
probably forced to buy back their own purchase, like so many of these enshittifiedc "aquisitions"✎ -
Kris
probably forced to buy back their own purchase, like so many of these enshittified "aquisitions" ✏