Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

> a dns record that specifies the domain to use for oidc for emails on that domain.

Oooh I like this idea!



Not a DNS record, no one uses dnssec so DNS is insecure. A .well-known path, with a TLS cert is better. Or a special subdomain, like MTA-STS uses.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: