[cabfpub] Revisiting CAA

Gervase Markham gerv at mozilla.org
Mon May 5 08:53:23 UTC 2014


On 03/05/14 01:54, kirk_hall at trendmicro.com wrote:
> Gerv -- at one point, you were going to conduct a test within Mozilla
> on this point -- how easy/hard was it to get CAA notations put in the
> proper DNS records, and how easy was it to coordinate the buyer(s) of
> certs for Mozilla with the various people in charge of the DNS for
> Mozilla's websites.  As I recall, you found it somewhat difficult to
> discover and coordinate the two groups.  Is that correct?

You can read about my attempts to get CAA enabled on mozilla.org here:
https://bugzilla.mozilla.org/show_bug.cgi?id=882128

Our DNS is managed by Akamai; there would be no problem getting the
various bits of mozilla.org coordinated if Akamai supported such
records, but it seems that they don't.

Gerv




More information about the Public mailing list