alt Hacker News> have the website define which CA they use, and don't let any of the others certify it.
Isn’t this exactly what CAA records are for?
> have the website define which CA they use, and don't let any of the others certify it.
Isn’t this exactly what CAA records are for?
CAA is only verified by CAs. A malicious CA can ignore CAA records.