[Servercert-wg] [EXTERNAL] Update definition of IP Address Contact in the BRs

[Ryan Sleevi]

On Thu, Feb 4, 2021 at 7:16 AM Dimitris Zacharopoulos (HARICA) via
Servercert-wg <servercert-wg at cabforum.org> wrote:

> I believe external DNS operators can be trusted. This has been established
> in previous discussions of the Validation Subcommittee and F2F meetings.
>

Correct.

The role of CAs is to reflect DNS. DNS is authoritative, and Applicants can
always choose a different DNS provider aligned with their needs.

This is no different than the fact that every TLD operator can obtain
certificates for any domain within their namespace, by virtue of
transfering the domain to their control.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.cabforum.org/pipermail/servercert-wg/attachments/20210204/402383ba/attachment.html>