Why “Dane” is being discussed
The most recent Hacker News stories and comments contributing to this topic's mentions.
I assume you meant DNSsec key, not "DANE key"? (No such thing, anyway.) For this discussion to make sense, it has to be the TLD's DNSsec ZSK or KSK. The fix in either case is ke…
by eqvinox · Oct 22, 2026
Sure, but there are three major issues with your statement, all related to how you actually look at and count things. First, not using DANE doesn't mean using MTA-STS. In partic…
by eqvinox · Oct 22, 2026
In any universe in which we can revive DANE stapling, we can add a single bit to HSTS state that talks about it. You can't simultaneously do and not do software development.
by quotemstr · Oct 21, 2026
It would need to be through TLDs all reporting new DANE records, or DANE itself would need to change. The threat model here is the TLD was somehow unknowingly hacked and the bad…
by mwwaters · Oct 21, 2026
HSTS doesn't fix the problem with stapling. You need a new form of HSTS that nobody has deployed, which makes "this is server misconfiguration" an especially funny argument. And…
by tptacek · Oct 21, 2026
Stripping of TLS generally is solved, so why would stripping of the extension in particular be a problem? The same kinds of solution work for both. TLS covers the extension list…
by quotemstr · Oct 21, 2026
Interest
Proportion of Hacker News items mentioning "dane" over time.
Mentions
Total number of Hacker News items mentioning "dane" over time.
Dane or Danes may refer to: Read more on Wikipedia