Mailing List Web Interface

[Pas]

Hello,

Excuse me for the noise. It's always hard to nitpick about IT sec, but
... well, that's security.

> Finally I add DNS CAA records to both pidgin.im and imfreedom.org so
> that browsers that check it will now verify that we only allow tls
> certificates to be issued for those domains from lets encrypt.

Browsers are very firmly discouraged to use CAA, it's only for CAs.

https://community.letsencrypt.org/t/caa-browser-check/31786/8


regards,
Pas