Re: DANE, was A Deep Dive on the Recent Widespread DNS Hijacking

[Julien Goodwin <nanog () studio442 com au>]

On 27/2/19 3:10 am, John Levine wrote:
> In article <B68C84D4-9D1A-4303-94CA-59CEBFB6B934 () pch net> you write:
> > We need to get switched over to DANE as quickly as possible, and stop wasting effort trying to keep the CA system 
> > alive with
> > ever-hackier band-aids.
>
> What's the DANE version of a green-bar cert?

You mean the EV certificates that most browsers are removing the distinction of, removing their only real justification 
for existing?

https://www.troyhunt.com/extended-validation-certificates-are-dead/

Not that they were ever actually widely used.

https://www.troyhunt.com/on-the-perceived-value-ev-certs-cas-phishing-lets-encrypt/