5 ms·

>CAA What is a CAA? Letsencrypt: please dont use initialisms in customer facing blog posts without using the FULL name at the first use. Makes things more lear

>CAA What is a CAA? Letsencrypt: please dont use initialisms in customer facing blog posts without using the FULL name at the first use. Makes things more learnable and googleable.

anderskaseorg 7y ago
https://en.wikipedia.org/wiki/DNS_Certification_Authority_Authorization https://en.wikipedia.org/wiki/DNS_Certification_Authority_Au...
tyingq 7y ago
Confused me too. They even already have a page they could have linked to. https://letsencrypt.org/docs/caa/ https://letsencrypt.org/docs/caa/
Ayesh 7y ago
Certificate Authority Authorization. It's a fairly common initialism in CA/TLS world (heh). The DNS record is also named "CAA".
rswail 7y ago
It's a free service. I understand your frustration, but CAA is a well known DNS record type. If you read the description of the problem, it explains it.
- djsumdog 7y ago
  I've been doing development and devops for years and have never heard of a CAA. Then again, I use http-01 and not dns validation, so that's probably why. Before LetsEncrypt I'd buy certs and it involved a lot of copying/pasting CSRs into web interfaces.
  - pfg 7y ago
    To be clear, CAA is relevant even if you're using http-01. CAs need to check whether the CAA records of a given domain allow/forbid issuance in addition to any of the methods used to demonstrate domain ownership to the CA.
lvh 7y ago
CAA is a term of art for a standard encoded in DNS. It stands for "Certification Authority Authorization", but most people who know what a CAA record is probably do not recognize it written as words. (I know I would need to read it several times to know that's what they meant, and I do this for a living.)
- tialaramex 7y ago
  Expanding other DNS record names isn't very helpful either. I know what a Canonical Name for something is, but CNAME seems clearer, Mail Exchanger definitely isn't a helpful way to think about what MX records are for... PTR and TXT aren't initials they're just short for "pointer" and "text" neither of which is much help divining what they're actually used for, and presumably AAAA doesn't actually stand for anything at all (?) other than it's four times bigger than the A record.
  - captncraig 7y ago
    4 A's for ipv6 of course, and 1 A for ipv4. How could that possibly be confusing? Had I been given a vote we would be using AAAA and AAAAAA records.

>CAA What is a CAA? Letsencrypt: please dont use initialisms in customer facing blog posts without using the FULL name at the first use. Makes things more learnable and googleable.

anderskaseorg 7y ago

https://en.wikipedia.org/wiki/DNS_Certification_Authority_Authorization https://en.wikipedia.org/wiki/DNS_Certification_Authority_Au...

tyingq 7y ago

Confused me too. They even already have a page they could have linked to. https://letsencrypt.org/docs/caa/ https://letsencrypt.org/docs/caa/

Ayesh 7y ago

Certificate Authority Authorization. It's a fairly common initialism in CA/TLS world (heh). The DNS record is also named "CAA".

rswail 7y ago

It's a free service. I understand your frustration, but CAA is a well known DNS record type. If you read the description of the problem, it explains it.

djsumdog 7y ago
I've been doing development and devops for years and have never heard of a CAA. Then again, I use http-01 and not dns validation, so that's probably why. Before LetsEncrypt I'd buy certs and it involved a lot of copying/pasting CSRs into web interfaces.
- pfg 7y ago
  To be clear, CAA is relevant even if you're using http-01. CAs need to check whether the CAA records of a given domain allow/forbid issuance in addition to any of the methods used to demonstrate domain ownership to the CA.

lvh 7y ago

CAA is a term of art for a standard encoded in DNS. It stands for "Certification Authority Authorization", but most people who know what a CAA record is probably do not recognize it written as words. (I know I would need to read it several times to know that's what they meant, and I do this for a living.)

tialaramex 7y ago
Expanding other DNS record names isn't very helpful either. I know what a Canonical Name for something is, but CNAME seems clearer, Mail Exchanger definitely isn't a helpful way to think about what MX records are for... PTR and TXT aren't initials they're just short for "pointer" and "text" neither of which is much help divining what they're actually used for, and presumably AAAA doesn't actually stand for anything at all (?) other than it's four times bigger than the A record.
- captncraig 7y ago
  4 A's for ipv6 of course, and 1 A for ipv4. How could that possibly be confusing? Had I been given a vote we would be using AAAA and AAAAAA records.