>But still my concerns regarding the TLS hostname check is unanswered.

DNSSEC ?

Best

2013/9/26 Michael Ströder <michael@stroeder.com>
Jakub Hrozek wrote:
> On Wed, Sep 25, 2013 at 08:22:57PM +0200, Michael Ströder wrote:
>> Hmm, I really wonder why SRV RRs are recommended over having a single service
>> CNAME RR and maybe several A/AAAA RRs?
>
> In my opinion, the biggest advantages are centrally defined failover
> using the "priority field" and the ability to evenly distribute load using
> "weight".

But still my concerns regarding the TLS hostname check is unanswered.

Ciao, Michael.


_______________________________________________
sssd-users mailing list
sssd-users@lists.fedorahosted.org
https://lists.fedorahosted.org/mailman/listinfo/sssd-users