Hacker News new | past | comments | ask | show | jobs | submit
account42 | on: Let's Encrypt bans certificate usage in any US sanctioned territory [pdf]
You could that with a much saner approach like DANE.
franga2000 | parent
Not back when SSL and the PKI ecosystem was developed.
trumpdong | root | parent
Yes actually you still could've. But it would require a pass through the IETF to stabdaddize a DNS record type, and that would delay Netscape's release.