top | item 45871830

(no title)

brody_hamer | 3 months ago

> a dns record that specifies the domain to use for oidc for emails on that domain.

Oooh I like this idea!

discuss

order

8organicbits|3 months ago

Not a DNS record, no one uses dnssec so DNS is insecure. A .well-known path, with a TLS cert is better. Or a special subdomain, like MTA-STS uses.