The race to secure record-like information for domains
Summary
An in-depth look at how applications can securely store and retrieve domain-level metadata, examining DNS and DNSSEC's limitations, and proposing HTTPS-based .well-known methods as practical alternatives. The article uses the email domain ecosystem (MX, TLS certificates) to compare DANE and MTA-STS, highlighting adoption challenges and complementary security strategies.