DNS over TLS Pubkey Pinning Info for unicast.uncensoreddns.org

by Tykling @ July 16, 2017 11:49

The public key for DNS-over-TLS on unicast.uncensoreddns.org / 89.233.43.71 / 2a01:3a0:53:53:: is:

(PEM format)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

The TLSA records look like this:

dig _853._tcp.unicast.uncensoreddns.org tlsa +dnssec

;; ANSWER SECTION:
_853._tcp.unicast.uncensoreddns.org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
_853._tcp.unicast.uncensoreddns.org. 43200 IN TLSA 3 1 2 252405C7CCE2CAC8C6E90BD02F1915649F0BE2E5F4A4FA8DBD5B7ED5 86EACA36D60DF262B6604FC3FA3584A7B9A5E14609DBC55B125DCD28 55CB33083CE08FA7
_853._tcp.unicast.uncensoreddns.org. 43200 IN TLSA 3 1 1 C22904DE360003A8D0997613AFFADB1DE10F982EFC750C196D0A7A59 DAEC784B

A PGP signed version of this message will be available soon.

Tags: pinning tls