|
|
|
|
|
|
by smarnach
963 days ago
|
|
|
You are correct that no browser is looking at CAA records, because it would be wrong to do so. CAA records don't retroactively revoke certificates that have already been issued. Their only purpose is for CAs to check them before issuing a certificate. |
|
|