Mailing List Web Interface

Pas pas at
Fri Jun 14 04:35:11 EDT 2019


Excuse me for the noise. It's always hard to nitpick about IT sec, but
... well, that's security.

> Finally I add DNS CAA records to both and so
> that browsers that check it will now verify that we only allow tls
> certificates to be issued for those domains from lets encrypt.

Browsers are very firmly discouraged to use CAA, it's only for CAs.


More information about the Devel mailing list