Hacker News new | ask | show | jobs
by the_zeroth_law 2908 days ago
We do mention both: see https://www.eff.org/deeplinks/2018/06/technical-deep-dive-st...

To sum up from that post, we think STARTTLS Everywhere is a stop-gap measure until DNSSEC is fully deployed, and STARTTLS Everywhere can act as a preload list for MTA-STS (to prevent DNS downgrade attacks).