Re: Using/validating DANE certs?

Daniel Stenberg via curl-library <[email protected]> Thu, 25 Sep 2025 22:50:02 +0200 (CEST)

Newsgroups	gmane.comp.web.curl.library
Message-ID	<[email protected]>

On Thu, 25 Sep 2025, Ali Mohammad Pur via curl-library wrote:

>     curl -vv --dane --upstream-dns 8.8.8.8 https://badhash.dane.huque.com/

We already have --dns-servers

>     curl -vv --dane https://cxbyte.me --add-dns-rr 
> AACBoAABAAIAAAABBmN4Ynl0ZQJtZQAAAQABwAwAAQABAAABGAAEkjtcrcAMAC4AAQAAARgAXQABDQIAAAEsaMmYTmjG2S6GyQZjeGJ5dGUCbWUA88TCNXPd4zVdaAVXfPTQelw1WHeLkH92ZUcrEUoR2Zm2kqxgg9MRtSrI+b0YuqWwfpts3PgOhfs8IMk6aDbGOAAAKQTQAACAAAAA 
> --resolve cxbyte.me:443:146.59.92.173

Who would want and be able to pass in the RR field like that? What exactly is 
the purpose of that?

-- 

  / daniel.haxx.se || https://rock-solid.curl.dev

-- 
Unsubscribe: https://lists.haxx.se/mailman/listinfo/curl-library
Etiquette:   https://curl.se/mail/etiquette.html