3 ms·

I think the current "meta" is CAA records? https://blog.cloudflare.com/why-certificate-pinning-is-outdated/ https://blog.cloudflare.com/why-certificate-pinning-

• 8organicbits 2y ago
  Correct, which Google is using: https://www.nslookup.io/domains/google.com/dns-records/caa/ https://www.nslookup.io/domains/google.com/dns-records/caa/
• syncsynchalt 2y ago
  CAA records rely on the CAs to respect them, and this is an article about how a CA has issued a cert in violation of a CAA record.
  • perching_aix 2y ago
    Oh right, for some reason I was under the impression that browsers utilize the record too.