Hi guys,
the news said that since a few days it became mandatory for the certificate authorities to check if there is a special DNS entry "type CAA" that allows or denies them to issue a certificate for a domain. Sounds like a good idea to me to for example allow the issuance only for beloved Let’s Encrpt and deny all other CAs.
Here an article about CAA:
DNS Certification Authority Authorization -...
How to create CAA record for DNS Certification Authority Authorization?
the news said that since a few days it became mandatory for the certificate authorities to check if there is a special DNS entry "type CAA" that allows or denies them to issue a certificate for a domain. Sounds like a good idea to me to for example allow the issuance only for beloved Let’s Encrpt and deny all other CAs.
Here an article about CAA:
DNS Certification Authority Authorization -...
How to create CAA record for DNS Certification Authority Authorization?