News for hackers. Stuff that matters.

A comment on Does my site need HTTPS?. Parent comment

Re:Does my site need HTTPS? by TingPing on Monday January 31, 2022 @05:07PM (#30155276)
The CAA dns type indicates which CAs are allowed to sign for a domain.
[ Parent | on HN ]
Re:Does my site need HTTPS? by dijit on Monday January 31, 2022 @05:37PM (#30155709)
If you’re in the middle; this is the most trivial thing in the world to block; in fact the CAA dns record is so limited in what it protects against that I’m genuinely confused as to why it exists.

Maybe with DoH it’s better. But that’s more https to make https not suck.

[ Parent | on HN ]