[cabfpub] no CAA authorizations -- RFC 6844

[y-iida at secom.co.jp]

Hello, public.

I'm still wondering when there are no CAA authorizations.

<A> When there are no relevant CAA records at all for a certain
domain, we will issue certificate for that domain.

<B> When there are some relevant CAA records, but no CAA with
"issue" property tag at all for a certificate domain, we will
issue non-wildcard certificates for that domain.

<C> Likewise, when there are some relevant CAA records, but no
CAA with "issuewild" property tag at all for a certificate
domain, we will issue wildcard certificate for that domain.

There are because chapter 4 says:
  if such a record set exists

Do those make problems?
--
  iida