What is a DNS CERT record?

dE_logics · Advocate Joined: 02 Jan 2009 Posts: 2290 Location: $TERM

I did search on the internet and only got 2 things -

1) The corresponding RFC
2) Using gnuPG with CERT records.

So this kind of response is supposed to publish certificates? As a form of DNS RR (over UDP)? And the response ain't even signed?

What about the request? Suppose I want a certificate X; so how do I uniquely identify X?
_________________
My blog

wswartzendruber · Posted: Thu Feb 16, 2012 8:42 pm Post subject:

I'm guessing this is supposed to go hand-in-hand with DNSSEC, which will sign the return. I'm also guessing that a single domain can have multiple CERT records.

dE_logics · Advocate Joined: 02 Jan 2009 Posts: 2290 Location: $TERM

Yes, DNSSEC can sign any response in that matter.

Now we can assure that CERT records are hardly used.
_________________
My blog

wswartzendruber · Posted: Fri Feb 17, 2012 10:10 pm Post subject:

I think it's probably like IPv6. The protocols and implementations are there, but it's not seen widespread usage yet. I think this won't be common place until DNSSEC is common.