[cabfpub] CAA concerns (and potential solutions)
gerv at mozilla.org
Fri Oct 28 07:48:35 MST 2016
On 28/10/16 15:28, Tim Hollebeek via Public wrote:
> There also appeared to be a misunderstanding on the call that the CAA
> spec requires bottom up checking in order to adhere to the requirements
> of the spec, and this would preclude checking the top element first.
> This is false.
"The search for a CAA record climbs the DNS name tree from the
specified label up to but not including the DNS root '.'."
I agree that in one sense that only says which records you look at in
which order, not what order you fetch the candidate records in...
More information about the Public