[cabfpub] CAA Test Suite

[Jeremy Rowley]

This is awesome! Thanks Andrew!

> On Aug 31, 2017, at 10:46 AM, Andrew Ayer via Public <public at cabforum.org> wrote:
> 
> To help with the correct implementation of CAA, I've put together a CAA
> test suite:
> 
>    https://caatestsuite.com/
> 
> It consists of a list of FQDNs for which no CA is allowed to issue.
> In addition to testing the basic CAA processing rules described in RFC
> 6844, it also tests for proper handling of edge cases and DNSSEC
> failures.
> 
> I encourage all CAs to test their CAA implementation against the FQDNs
> in the test suite.  If your implementation says you're allowed to issue
> for any of the FQDNs, then there may be a bug in your CAA
> implementation.
> 
> Let me know if you have any issues or questions.
> 
> Regards,
> Andrew
> _______________________________________________
> Public mailing list
> Public at cabforum.org
> https://cabforum.org/mailman/listinfo/public