Isn't that the purpose of CAA? You can choose which CAs can sign a cert for your domain?
CAA records are requested and used only by certificate authorities. They might as well not exist for web browsers (they don't even look for them). Maybe that should change?
alt Hacker News
CAA records are requested and used only by certificate authorities. They might as well not exist for web browsers (they don't even look for them). Maybe that should change?