[cabfpub] CAA concerns (and potential solutions)
sleevi at google.com
Fri Oct 28 09:51:09 MST 2016
On Fri, Oct 28, 2016 at 8:01 AM, Gervase Markham via Public <
public at cabforum.org> wrote:
> However, the expected use case for skipsubdomains=true is when CAs
> have a very particular relationship with a small number of clients who
> need high speed issuance.
If that is the use case, then I think the onus should be on CAs wanting or
representing that to show, in a timely fashion, data that would suggest
this is necessary. Otherwise, it seems very much an 'uncertainty' thing,
without any concrete demonstration that the overhead of the CAA check for
<random>.thing.example.com would dominate any of the issuance process.
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the Public