[Top][All Lists]

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: GNUnet Name System Questions

From: Christian Grothoff
Subject: Re: GNUnet Name System Questions
Date: Mon, 4 Dec 2023 00:05:22 +0900
User-agent: Mozilla Thunderbird

I am also not sure about the question, but I would say this: you should probably consider using DANE [1] records to enable users to secure TLS connections to your GNS-resolved sites. GNUnet's GNS-enabled socks proxy validates TLS server certificates against DANE records in GNS, and gnunet-namestore-gtk can help you create DANE records.


On 12/3/23 22:04, Schanzenbach, Martin wrote:
I'm sorry I do not understand the question. How does any of this relate to GNS?


On 03.12.23 09:56, wrote:
I almost forget to mention that there is a possible issue with URL https://IPv4_IP_address and https://[IPv6_IP_address]. SSL certification, at least for the domain name, will not cover https:// protocol and IP address combinations. Are insecure URL https://IPv4_IP_address and https://[IPv6_IP_address considered possible man-in-the-middle attack vulnerabilities?


reply via email to

[Prev in Thread] Current Thread [Next in Thread]