The ACME protocol's Certificate Authority Authorization (CAA) extensions are set to become mandatory, requiring ACME clients to support CAA record checking and related extensions. This change aims to enhance domain validation security by ensuring compliance with CAA policies during certificate issuance.
The ACME protocol's Certificate Authority Authorization (CAA) extensions are set to become mandatory, requiring ACME clients to support CAA record checking and related extensions. This change aims to enhance domain validation security by ensuring compliance with CAA policies during certificate issuance.
Starting March 7, 2025, ACME-based Certificate Authorities must support CAA extensions, allowing domain holders to restrict which CAs can issue certificates. The change also adds ACME support for Contact and Issue Wildcard properties, limiting wildcard certificate issuance.
Acme CAA (Certificate Authority Authorization) extensions are set to become mandatory, requiring certificate authorities to implement extended CAA checking when issuing certificates. This change aims to enhance security by enforcing stricter domain validation policies.
The ACME protocol's Certificate Authority Authorization (CAA) extensions are set to become mandatory, requiring ACME clients to support CAA record checking and related extensions. This change aims to enhance domain validation security by ensuring compliance with CAA policies during certificate issuance.
No deep-dive for this story yet — use the button below to generate one.