[cabfpub] Revisiting CAA

[Gervase Markham]

On 03/05/14 01:54, kirk_hall at trendmicro.com wrote:
> Gerv -- at one point, you were going to conduct a test within Mozilla
> on this point -- how easy/hard was it to get CAA notations put in the
> proper DNS records, and how easy was it to coordinate the buyer(s) of
> certs for Mozilla with the various people in charge of the DNS for
> Mozilla's websites.  As I recall, you found it somewhat difficult to
> discover and coordinate the two groups.  Is that correct?

You can read about my attempts to get CAA enabled on mozilla.org here:
https://bugzilla.mozilla.org/show_bug.cgi?id=882128

Our DNS is managed by Akamai; there would be no problem getting the
various bits of mozilla.org coordinated if Akamai supported such
records, but it seems that they don't.

Gerv