Skip to content
Better HN
Top
New
Best
Ask
Show
Jobs
Search
⌘K
undefined | Better HN
0 points
perching_aix
1y ago
0 comments
Share
I think the current "meta" is CAA records?
https://blog.cloudflare.com/why-certificate-pinning-is-outda...
0 comments
default
newest
oldest
syncsynchalt
1y ago
CAA records rely on the CAs to respect them, and this is an article about how a CA has issued a cert in violation of a CAA record.
perching_aix
OP
1y ago
Oh right, for some reason I was under the impression that browsers utilize the record too.
8organicbits
1y ago
Correct, which Google is using:
https://www.nslookup.io/domains/google.com/dns-records/caa/
j
/
k
navigate · click thread line to collapse