[Cryptech Tech] The cert for cryptech.is

Rob Austein sra at hactrn.net
Sat Mar 29 16:40:19 UTC 2014


At Sat, 29 Mar 2014 16:57:29 +0900, Randy Bush wrote:
> 
> > its actually not self-signed but published as a TLSA-record.. right?
> 
> i believe so

That's the intent, but appears not to be the case at present:

- I see no evidence that the cryptech.is zone is signed

- Queries for (eg) _443._tcp_.cryptech.is return NXDOMAIN.

cryptech.is's SOA says the zone maintainer is hostmaster at mnt.se.
Is that where I should whine about this?



More information about the Tech mailing list