Policy-Discussion

[Karl-Heinz Gödderz <CAcert AT GuKK-Online.de>]

Dear policy-group members,

we were informed that
> since september, 8th, 2017 CAs must check DNS' CAA records. This
> decision was taken in spring 2017 by CA/Browser forum which CAcert is
> member of.
>
> I can't see that this is already implemented in CAcert's signing
> software, therefore I would like to ask you to take care of.
does anyone from this group know if we have to change one of our
policies to be allowed to implement this imperative?

I couldn't find any in CPS. Which more policies do apply?

Greetings
Karl-Heinz


* more information https://tools.ietf.org/html/rfc6844

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature