[spec] Certificate trust

[Stephane Bortzmeyer]

On Mon, Mar 01, 2021 at 11:44:06AM +0100,
 Côme Chilliet <come at chilliet.eu> wrote 
 a message of 25 lines which said:

> Who is right?

Both :-)

Programmers may not have a version of OpenSSL or GnuTLS recent enough,
or they may use another TLS library, or the binding to GnuTLS/OpenSSL
they use for their favorite programming language may not expose DANE
validation yet.