You had me at “DNS”.
Would love to dig into this (no pun intended)
The DNSSEC proof validation can also be played with at http://http-dns-prover.as397444.net/
Please Login to reply.
DANE could play a role here to provide transport layer encryption without needing to trust a CA
It could, but luckily we don’t actually need any transport encryption to send money to people over bitcoin :)
That prover does support TLSS though, if it want to use DANE for something.