Comment by akerl_
13 hours ago
> have the website define which CA they use, and don't let any of the others certify it.
Isn’t this exactly what CAA records are for?
13 hours ago
> have the website define which CA they use, and don't let any of the others certify it.
Isn’t this exactly what CAA records are for?
CAA is only verified by CAs. A malicious CA can ignore CAA records.