Questions tagged [caa]

A Certification Authority Authorization (CAA) is a DNS record that limits what Certificate Authorities that may issue certificates for the domain in question.

Filter by
Sorted by
Tagged with
0
votes
1answer
119 views

Are problems expected when a subdomain CNAME target has no CAA record?

Consider the following DNS setup of example.com: A 89.41.169.49 # this is for redirect.pizza CAA 0 issue "letsencrypt.org" www CNAME ghs....
1
vote
0answers
197 views

What is the purpose of the critical flag being enabled (128) on a CAA IODEF record?

CAA, or Certificate Authority Authorization, provides a way to designate which CAs are allowed to create a Certificate for specific domains. This is done accomplished by publishing new caa DNS records,...
1
vote
0answers
172 views

Detecting a web based MITM attack?

I've been looking into ways to detect a Man In the Middle attack, when the client has "duped" into trusting third party CA. Examples of this are, anti-virus applications and corporate ...
2
votes
1answer
201 views

Does a CAA record on a local hostname in a LAN offer additional security?

A CAA DNS record limits the certificate authorities that may issue a certificate for a domain and its subdomains. Do CAA records make sense in a LAN environment? Assume internal hostnames such as ldap....