Clarify RRsets with no issue/issuewild.

jsha · May 30, 2018 · 675a115 · 675a115
1 parent 6a1c822
commit 675a115
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/draft-ietf-lamps-rfc6844bis.md b/draft-ietf-lamps-rfc6844bis.md
@@ -480,6 +480,11 @@ CAA authorizations are additive; thus, the result of specifying both
 the empty issuer and a specified issuer is the same as specifying
 just the specified issuer alone.
 
+A non-empty CAA record set that contains no issue or issuewild property tags
+is authorization to any certificate issuer to issue for the corresponding
+domain, provided that no records in the CAA record set otherwise prohibit
+issuance.
+
 An issuer MAY choose to specify issuer-parameters that further
 constrain the issue of certificates by that issuer, for example,
 specifying that certificates are to be subject to specific validation