Skip to content

Commit

Permalink
Clarify based on list feedback.
Browse files Browse the repository at this point in the history
  • Loading branch information
jsha committed May 30, 2018
1 parent 675a115 commit 65a5665
Showing 1 changed file with 8 additions and 3 deletions.
11 changes: 8 additions & 3 deletions draft-ietf-lamps-rfc6844bis.md
Original file line number Diff line number Diff line change
Expand Up @@ -480,10 +480,10 @@ CAA authorizations are additive; thus, the result of specifying both
the empty issuer and a specified issuer is the same as specifying
just the specified issuer alone.

A non-empty CAA record set that contains no issue or issuewild property tags
A non-empty CAA record set that contains no issue property tags
is authorization to any certificate issuer to issue for the corresponding
domain, provided that no records in the CAA record set otherwise prohibit
issuance.
domain, provided that it is a non-wildcard domain, and no records in the
CAA record set otherwise prohibit issuance.

An issuer MAY choose to specify issuer-parameters that further
constrain the issue of certificates by that issuer, for example,
Expand All @@ -509,6 +509,11 @@ If at least one issuewild property is specified in the relevant
CAA record set, all issue properties MUST be ignored when
processing a request for a domain that is a wildcard domain.

A non-empty CAA record set that contains no issue or issuewild property tags
is authorization to any certificate issuer to issue for the corresponding
wildcard domain, provided that no records in the CAA record set otherwise
prohibit issuance.

## CAA iodef Property

The iodef property specifies a means of reporting certificate issue
Expand Down

0 comments on commit 65a5665

Please sign in to comment.