Re: Possible violation of CAA by nazwa.pl

2018-07-25 Thread Matthew Hardeman via dev-security-policy
Yes, I thought there was an exemption for that also. The A-DNS operator could always just momentarily change the records to authorize anyway, so why bother with the check? On Wed, Jul 25, 2018 at 4:21 PM, Quirin Scheitle via dev-security-policy < dev-security-policy@lists.mozilla.org> wrote: >

Re: Possible violation of CAA by nazwa.pl

2018-07-25 Thread Quirin Scheitle via dev-security-policy
Hi Michel, > On 23. Jul 2018, at 22:36, michel.lebihan2000--- via dev-security-policy > wrote: > > I think my domain registrar just violated my CAA by issuing that > certificate. Where they allowed to issue this certificate? the name servers for lebihan.pl are ns[1-3].nazwa.pl. , which

Possible violation of CAA by nazwa.pl

2018-07-25 Thread michel.lebihan2000--- via dev-security-policy
Hello, My domain registrar who is also a certificate authority just issued a precertificate (visible in CT logs) and a valid certificate for my domain. This is part of their new offer to automatically offer free certificates for all of their domains: https://www.nazwa.pl/certyfikaty-ssl/ I had

Re: GoDaddy Revocations Due to a Variety of Issues

2018-07-25 Thread Joanna Fox via dev-security-policy
On Friday, July 20, 2018 at 9:39:04 PM UTC-7, Peter Bowen wrote: > On Fri, Jul 20, 2018 at 6:39 PM Daymion Reynolds via dev-security-policy < > dev-security-policy@lists.mozilla.org> wrote: > > > The certificates were identified by analyzing results from both zlint and > > certlint. We also