<snip> - Do/ought parent domains apply (as they do in CAA)? If not, it might be worth a few words since the usage here is different.
Yes they do, section 5 states "The ACME client initiates a DNS lookup to retrieve the CAA record(s) according to [RFC8659]", which specifies how CAA lookups need to be performed. [CW] Thanks. Geez, I missed that despite looking explicitly for it. I think this makes the spurious request tendency worse, but maybe you’re right that pelting a CA with such requests is a clue. Thanks for the quick reply.
_______________________________________________ Acme mailing list [email protected] https://www.ietf.org/mailman/listinfo/acme
