[cabfpub] CAA concerns (and potential solutions)

Ryan Sleevi sleevi at google.com
Fri Oct 28 16:51:09 UTC 2016

On Fri, Oct 28, 2016 at 8:01 AM, Gervase Markham via Public <
public at cabforum.org> wrote:

> However, the expected use case for skipsubdomains=true is when CAs
> have a very particular relationship with a small number of clients who
> need high speed issuance.

If that is the use case, then I think the onus should be on CAs wanting or
representing that to show, in a timely fashion, data that would suggest
this is necessary. Otherwise, it seems very much an 'uncertainty' thing,
without any concrete demonstration that the overhead of the CAA check for
<random>.thing.example.com would dominate any of the issuance process.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.cabforum.org/pipermail/public/attachments/20161028/42174b87/attachment-0003.html>

More information about the Public mailing list