[cabfpub] Fwd: [Bug 882128] Support CAA records on mozilla.org domain

[Gervase Markham]

Dear CAB Forum members,

Here's the final determination on why we aren't able to support CAA on
mozilla.org at the moment. I started pushing for this because people
thought it would be good to get implementation experience; well, here is
some :-) If anyone has security contacts inside Akamai who they can
encourage to support this, do go ahead.

Gerv

-------- Forwarded Message --------
Subject: [Bug 882128] Support CAA records on mozilla.org domain
Date: Fri, 05 Sep 2014 19:42:27 +0000
From: Bugzilla at Mozilla <bugzilla-daemon at mozilla.org>
To: gerv at mozilla.org

https://bugzilla.mozilla.org/show_bug.cgi?id=882128

Brian Hourigan [:digi] <bhourigan at mozilla.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
              Flags|needinfo?(bhourigan at mozilla |
                   |.com)                       |

--- Comment #45 from Brian Hourigan [:digi] <bhourigan at mozilla.com>
2014-09-05 12:42:27 PDT ---
I just contacted Akamai CCARE and they confirmed CAA records are not
supported.
Our architecture is setup so Akamai AXFRs data from our BIND based hidden
masters. While our side would support the record, their ZTA (zone transfer
agent) and proprietary DNS server does not.

-- 
Configure bugmail: https://bugzilla.mozilla.org/userprefs.cgi?tab=email

-------------------------------
Product/Component: Infrastructure & Operations :: WebOps: Other



------- You are receiving this mail because: -------
You are on the CC list for the bug.
You reported the bug.