This is awesome! Thanks Andrew!
> On Aug 31, 2017, at 10:46 AM, Andrew Ayer via Public <[email protected]> > wrote: > > To help with the correct implementation of CAA, I've put together a CAA > test suite: > > https://caatestsuite.com/ > > It consists of a list of FQDNs for which no CA is allowed to issue. > In addition to testing the basic CAA processing rules described in RFC > 6844, it also tests for proper handling of edge cases and DNSSEC > failures. > > I encourage all CAs to test their CAA implementation against the FQDNs > in the test suite. If your implementation says you're allowed to issue > for any of the FQDNs, then there may be a bug in your CAA > implementation. > > Let me know if you have any issues or questions. > > Regards, > Andrew > _______________________________________________ > Public mailing list > [email protected] > https://cabforum.org/mailman/listinfo/public _______________________________________________ Public mailing list [email protected] https://cabforum.org/mailman/listinfo/public
