Hacker News new | ask | show | jobs
by toast0 2827 days ago
CAA isn't restricting acceptance of certs, it's restricting issuance, assuming the attempted issuer is compliant, competent, and that your domain didn't get hijacked.