Technically something like DANE can allow you to present DNSSEC-backed self-signed certs and even allow multi-domain matching that removes the need for SNI and Encrypted Client Hello... but until the browsers say it is supported, it's not
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
replies: