[cabfpub] CAA concerns (and potential solutions)

[Ryan Sleevi]

On Fri, Oct 28, 2016 at 8:01 AM, Gervase Markham via Public <
public at cabforum.org> wrote:

> However, the expected use case for skipsubdomains=true is when CAs
> have a very particular relationship with a small number of clients who
> need high speed issuance.


If that is the use case, then I think the onus should be on CAs wanting or
representing that to show, in a timely fashion, data that would suggest
this is necessary. Otherwise, it seems very much an 'uncertainty' thing,
without any concrete demonstration that the overhead of the CAA check for
<random>.thing.example.com would dominate any of the issuance process.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.cabforum.org/pipermail/public/attachments/20161028/42174b87/attachment-0003.html>