Post #2447678

@SRAZKVT@tech.lgbt @dalias@hachyderm.io yes, and this is the exact reason why browsers won't adopt this, CAs probably pay browser vendors good money to ensure DANE is never supported in any serious capacity. see: how Windows kernel driver signing still requires you to procure an EV cert (remember those?) even when in the end, it's Microsoft that signs *all* modules that get loaded into the kernel these days.