4 ms·
> The CA/Browser Forum requires all certificate authorities to check CAA records prior to issuance. And what if a CA fails to check CAA records? Revoke their s
by netheril96 8y ago
> The CA/Browser Forum requires all certificate authorities to check CAA records prior to issuance.
And what if a CA fails to check CAA records? Revoke their status as an authority? By then attackers may have already obtained highly confidential information from DoD sites.