bug-wget
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

DANE support for Wget2


From: Tim Rühsen
Subject: DANE support for Wget2
Date: Sun, 23 Apr 2023 20:12:25 +0200
User-agent: Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101 Thunderbird/102.7.2

For the interested people, DANE support has been merged today (with GnuTLS build only).

DANE allows to verify the server certificates for HTTPS connections via DNS. This allows to connect to servers without having a CA certificate pool installed - well, *if* the the site admin prepared the DNS entry for DANE (with so called TLSA records).

WARNING: Without DNSSEC, MITM attacks can't be detected when using DANE.

DANE is still an experimental feature and needs to be enabled via
the `--dane` CLI option.

Have fun playing with it.
Any feedback is highly appreciated.

See also
https://en.wikipedia.org/wiki/DNS-based_Authentication_of_Named_Entities
https://gitlab.com/gnuwget/wget2/-/issues/627
https://gitlab.com/gnuwget/wget2/-/merge_requests/522

Regards, Tim

Attachment: OpenPGP_signature
Description: OpenPGP digital signature


reply via email to

[Prev in Thread] Current Thread [Next in Thread]