October 7-9, 2025
October 7-9, 2025
REGISTER
NOW
BECOME A
SPONSOR
SPEAKERS
OUR MISSION
“We believe everyone should have access to security and privacy tools, whoever they are, wherever they are or whatever their personal beliefs are, as a fundamental human right.”
OUR MISSION
“We believe everyone should have access to security and privacy tools, whoever they are, wherever they are or whatever their personal beliefs are, as a fundamental human right.”


DNSSEC, the DANE PKI and OpenSSL

DNSSEC and DANE offer an alternative to the established WebPKI that avoids needing to trust too many third-party CAs. The right party to assert who controls a domain is the parent registry in coördination with the domain registrar; 3rd-party CAs are second-hand observers performing weak trust-on-first-use tests of "domain control". This talk will cover the preliminaries of DNSSEC and DANE and then explore support for DANE in the OpenSSL API.

Date: 08.10.2025
Time: 10:00
Location: Prague
Track: Technical Deep Dive & Innovation