[cabfpub] Fwd: [Bug 882128] Support CAA records on mozilla.org domain

Gervase Markham gerv at mozilla.org
Mon Sep 8 13:29:52 UTC 2014

Dear CAB Forum members,

Here's the final determination on why we aren't able to support CAA on
mozilla.org at the moment. I started pushing for this because people
thought it would be good to get implementation experience; well, here is
some :-) If anyone has security contacts inside Akamai who they can
encourage to support this, do go ahead.


-------- Forwarded Message --------
Subject: [Bug 882128] Support CAA records on mozilla.org domain
Date: Fri, 05 Sep 2014 19:42:27 +0000
From: Bugzilla at Mozilla <bugzilla-daemon at mozilla.org>
To: gerv at mozilla.org


Brian Hourigan [:digi] <bhourigan at mozilla.com> changed:

           What    |Removed                     |Added
              Flags|needinfo?(bhourigan at mozilla |
                   |.com)                       |

--- Comment #45 from Brian Hourigan [:digi] <bhourigan at mozilla.com>
2014-09-05 12:42:27 PDT ---
I just contacted Akamai CCARE and they confirmed CAA records are not
Our architecture is setup so Akamai AXFRs data from our BIND based hidden
masters. While our side would support the record, their ZTA (zone transfer
agent) and proprietary DNS server does not.

Configure bugmail: https://bugzilla.mozilla.org/userprefs.cgi?tab=email

Product/Component: Infrastructure & Operations :: WebOps: Other

------- You are receiving this mail because: -------
You are on the CC list for the bug.
You reported the bug.

More information about the Public mailing list