[cabfpub] Checking CAA oneself

Gervase Markham gerv at mozilla.org
Thu Sep 22 15:40:36 UTC 2016


On 22/09/16 16:03, J.C. Jones wrote:
> Pretty sure I got this from you at some point. :)
> 
> dig +short -t TYPE257 "$@" | perl -nE '@x = split(); say map(chr, map { hex } ($x[2] =~ m/../g ))'

Thanks everyone! And in return, here's an improved version which can
deal with longer entries, like Comodo's:

dig +short -t TYPE257 "$@" | perl -nE '@x = split(); splice(@x, 0, 2);
say map(chr, map { hex } (join("", @x) =~ m/../g ))'

It seems depressingly few domains deploy CAA, having checked a selection
of famous ones. Perhaps we need more publicity for it.

Gerv



More information about the Public mailing list