[cabfpub] CAA records on google.com

[Rick Andrews]

Adam,

Thanks for doing this. At the f2f meeting, I suggested that browser vendors add CAA records to gain some experience with it, and report back to the group. Since you got it done so quickly, I guess it was relatively easy for Google to deploy. I'm not sure if you are representative of many other companies. Can you share any info on how easy the process was?

-Rick

On Jun 19, 2013, at 10:10 PM, "Adam Langley" <agl at google.com> wrote:

> google.com is now serving two CAA[1] records:
> 
> $ dig +short -t TYPE257 google.com
> \# 19 0005697373756573796D616E7465632E636F6D
> \# 23 0009697373756577696C6473796D616E7465632E636F6D
> 
> These correspond (I hope) to "issue" and "issuewild" records with a
> value of "symantec.com". We are not aware of any CA that looks for
> these records yet but we believe that, reasonably implemented, CAA is
> a low-cost, modest-benefit technique and this is a public show of
> support.
> 
> [1] https://tools.ietf.org/html/rfc6844
> 
> 
> Cheers
> 
> AGL
> _______________________________________________
> Public mailing list
> Public at cabforum.org
> https://cabforum.org/mailman/listinfo/public