| ▲ | akerl_ a day ago | |||||||
> have the website define which CA they use, and don't let any of the others certify it. Isn’t this exactly what CAA records are for? | ||||||||
| ▲ | jeroenhd 11 hours ago | parent [-] | |||||||
CAA is only verified by CAs. A malicious CA can ignore CAA records. | ||||||||
| ||||||||