3 ms·
How big of a problem is it really, with CAA records and FIDO2 or passkeys? CAA makes sure only one CA signs the cert for the real domain. FIDO2 prevents phisin
by solatic 1y ago
How big of a problem is it really, with CAA records and FIDO2 or passkeys?
CAA makes sure only one CA signs the cert for the real domain. FIDO2 prevents phising on a similar-looking domain. EV would force a phisher to get a similar-looking corporate name, but it's beside the main FIDO2 protection.