Hacker News new | ask | show | jobs
by web007 2991 days ago
CAA wouldn't help in most cases!

If you have an IP based delegation (A or AAAA record) you're probably okay, but if you have CNAME delegation you're beholden to the named entity. I've commented on this before on HN when CloudFlare did the same thing to me: https://news.ycombinator.com/item?id=16579486