[cabfpub] Draft CAA motion

Gervase Markham gerv at mozilla.org
Wed Nov 9 17:34:34 UTC 2016


On 09/11/16 16:02, Jeremy Rowley wrote:
> One way around the difficulty of CAA recording checking for large
> companies and mass issuance is to exempt the CA from record checking
> where issuance is through a technically constrained intermediate.  In
> this case, the CA has already verified the company has requested an
> issuing CA (which means high volume issuance) and you know the
> company is only issuing to their domains.

Yep, good point. I think we did discuss that last time, and it didn't
make it into the motion. I will add it. Although I might make it an
optional opt-out which has to be in the contract so the customer is
aware, rather than an automatic opt-out.

Gerv



More information about the Public mailing list