DNSSEC on wire.com

[bmwhocking]

Hello,

I noticed wire.com doesn't validate via DNSSEC, despite the web server & app appearing to now have DNSSEC checks in place.

Wondered if this is still on the road map, it appeared to be in 2017.
Understand that AWS route 55 don't support DNSSEC so this may be changeling for you.

Thank you in advance for any thoughts,

Ben

[raphaelrobert]

Hi @bmwhocking,

You are right, it is a limitation of AWS. We use certificate pinning at the leaf level to make sure the Wire apps connect to the right servers.