Hacker News new | ask | show | jobs
by zAy0LfpBZLC8mAC 3777 days ago
I would say the opposite: There is no excuse for cementing the role of CAs for SMTP. DANE doesn't need any CA, and there is no problem with legacy clients that require CA-signed certs.