Mailing List Web Interface
Pas
pas at zomg.hu
Fri Jun 14 04:35:11 EDT 2019
Hello,
Excuse me for the noise. It's always hard to nitpick about IT sec, but
... well, that's security.
> Finally I add DNS CAA records to both pidgin.im and imfreedom.org so
> that browsers that check it will now verify that we only allow tls
> certificates to be issued for those domains from lets encrypt.
Browsers are very firmly discouraged to use CAA, it's only for CAs.
https://community.letsencrypt.org/t/caa-browser-check/31786/8
regards,
Pas
More information about the Devel
mailing list