News for hackers. Stuff that matters.

A comment on W3.org Cert Expired. Parent comment

Re:W3.org Cert Expired by bawolff on Tuesday June 01, 2021 @11:25PM (#27364478)
CAA only applies at time of issue. Its totally valid for your CAA records to not match the cert you are using, as long as CAA was ok at issue time.
[ Parent | on HN ]
Re:W3.org Cert Expired by raggi on Tuesday June 01, 2021 @11:26PM (#27364487)
Which it appears that it was not, at the time that cert was issued!

I have no idea if CAB have made CAA a requirement, but I presume not.

[ Parent | on HN ]
Re:W3.org Cert Expired by bawolff on Tuesday June 01, 2021 @11:31PM (#27364526)
It has been since 2017 afaik https://archive.cabforum.org/pipermail/public/2017-March/009...
[ Parent | on HN ]
Re:W3.org Cert Expired by raggi on Tuesday June 01, 2021 @11:46PM (#27364597)
Oh, self-correction, Gandi is a Sectico delegate.
[ Parent | on HN ]