Please avoid "3 0 1" and "3 0 2" DANE TLSA records with LE certificates

[ietf-dane]

@hlandau

The main disadvantage of this, I think, is that you have to send the root in your certificate chain, which is unusual, but shouldn't cause any problems.

Yes, while including root CAs in the chain may be unusual without DANE, it is required with DANE if you want to use a root CA as a DANE-TA(2) trust-anchor. See:

RFC 7671: The DNS-Based Authentication of Named Entities (DANE) Protocol:...