[cabfpub] Draft CAA motion
gerv at mozilla.org
Wed Nov 9 17:34:34 UTC 2016
On 09/11/16 16:02, Jeremy Rowley wrote:
> One way around the difficulty of CAA recording checking for large
> companies and mass issuance is to exempt the CA from record checking
> where issuance is through a technically constrained intermediate. In
> this case, the CA has already verified the company has requested an
> issuing CA (which means high volume issuance) and you know the
> company is only issuing to their domains.
Yep, good point. I think we did discuss that last time, and it didn't
make it into the motion. I will add it. Although I might make it an
optional opt-out which has to be in the contract so the customer is
aware, rather than an automatic opt-out.
More information about the Public