alt Hacker NewsId caution against using Cloudflare for DNS. They rewrite your CAA record so multiple other CAs can sign certs on your domains. It's non-obvious unless you query your own CAA record
Id caution against using Cloudflare for DNS. They rewrite your CAA record so multiple other CAs can sign certs on your domains. It's non-obvious unless you query your own CAA record
Source/writeup somewhere? The amount of domains that use CF must be staggering, so if this was a real threat being leveraged in the wild you'd think it would be an epidemic no??