A Call to Reconsider Certification Authority Authorization (CAA)
arXiv:2411.07702 · doi:10.1109/MSEC.2025.3531232
Abstract
Certification Authority Authentication (CAA) is a safeguard against illegitimate certificate issuance. We show how shortcomings in CAA concepts and operational aspects undermine its effectiveness in preventing certificate misissuance. Our discussion reveals pitfalls and highlights best practices when designing security protocols based on DNS.
9 pages, 4 figures