Why “Caa” is being discussed
The most recent Hacker News stories and comments contributing to this topic's mentions.
> I don't think such constraints would really work. My company might have 4 domains on different TLDs and then end up needing to use 4 different CAs. Geography doesn't really ap…
by amluto · Oct 21, 2026
CAA records were never intended to be used by clients (Relying Parties), the RFC specifically prohibits them from using the CAA record to determine if the issuer was allowed to…
by parasyte · Oct 21, 2026
CAA records are only checked by the CA at the point of issuance, not by the client later. If they did, there are problems to consider: 1. A domain would have to keep the CAA rec…
by Scott_Helme_ · Oct 21, 2026
You said: > In a world [where] CT logs and CAA records [exist] And we are in that world. CT logs and CAA records exist. They are around. What you are implying you said is: > In…
by lelandbatey · Oct 21, 2026
> One big problem with the CA system is that any CA - even the most incompetent - can sign certificates for any domain. Is this not what CAA records were intended to solve? It s…
by itintheory · Oct 21, 2026
You said "yes" but then answered "no"? Like it seems your disagreement is that you're pointing out there are systems today that trust WebPKI CAs but don't validate CT/SCTs.…
by akerl_ · Oct 21, 2026
Interest
Proportion of Hacker News items mentioning "caa" over time.
Mentions
Total number of Hacker News items mentioning "caa" over time.
Caa balansae is a species of flowering plant in the dogbane family, Apocynaceae. It is the sole species in genus Caa. It is a liana native to Paraguay to Misiones Province of northeastern Argentina. Read more on Wikipedia