libval14: val_dane_check: usage DANE-TA(2) may bypass cert validation entirely

[Ondřej Surý]

Hi,

this is now public, reported by Thomas Fargeix #797470

And I am emailing the folks I know from SPARTA (or how they are called
now[*]), if they are still actively maintaining dnsval. The website,
issue tracker and code repository is not very optimistic.

I think we might also consider the possibility of dropping dnsval from
the archive.

* They got bought last year or so, so they priorities might have
shifted, or that USG grant ran out...
-- 
Ondřej Surý <ondrej at sury.org>
Knot DNS (https://www.knot-dns.cz/) – a high-performance DNS server