[cabfpub] CAA records on google.com

Rick Andrews Rick_Andrews at symantec.com
Thu Jun 20 06:55:57 UTC 2013


Thanks for doing this. At the f2f meeting, I suggested that browser vendors add CAA records to gain some experience with it, and report back to the group. Since you got it done so quickly, I guess it was relatively easy for Google to deploy. I'm not sure if you are representative of many other companies. Can you share any info on how easy the process was?


On Jun 19, 2013, at 10:10 PM, "Adam Langley" <agl at google.com> wrote:

> google.com is now serving two CAA[1] records:
> $ dig +short -t TYPE257 google.com
> \# 19 0005697373756573796D616E7465632E636F6D
> \# 23 0009697373756577696C6473796D616E7465632E636F6D
> These correspond (I hope) to "issue" and "issuewild" records with a
> value of "symantec.com". We are not aware of any CA that looks for
> these records yet but we believe that, reasonably implemented, CAA is
> a low-cost, modest-benefit technique and this is a public show of
> support.
> [1] https://tools.ietf.org/html/rfc6844
> Cheers
> _______________________________________________
> Public mailing list
> Public at cabforum.org
> https://cabforum.org/mailman/listinfo/public

More information about the Public mailing list