Home / server / Questions / 1056525
In Process
MShakeG
Asked: 2021-03-10 22:00:20 +0800 CST

Why have both CERT and TLSA DNS RR?

  • 772

I know of at least 2 DNS resource record types that serve the purpose of enabling domain owners the ability to control approved/revoked certificates either self-signed or by CA's namely the CERT and TLSA RR. I'm not sure if there are other fields that basically do this, but why have both when just one will suffice?

domain-name-system ssl certificate-authority ssl-certificate

0 Answers