Home Books Training Newsletter Resources
Sign up Log in

Bulletproof TLS Newsletter Bulletproof TLS Newsletter RSS feed

Bulletproof TLS Newsletter is a free periodic newsletter bringing you commentary and news surrounding SSL/TLS and Internet PKI, designed to keep you informed about the latest developments in this space. Received monthly by more than 50,000 subscribers. Written by Ivan Ristić.


Current Issue
98

CAA Expands into New Use Cases

28 Feb 2023

Certification Authority Authorization (CAA) is a good example of a technology that’s slow and steady. Originally conceived in 2013 as RFC 6844, it was adopted by the CA/Browser Forum and mandated for all CAs in 2017, and eventually brought to its current shape in 2019 as RFC 8659. Although not perfect, it gets the job done, and support for it continues to grow.

If you’re not already familiar with CAA, in essence it’s a mechanism that enables domain owners to advertise a certificate issuance policy, in effect controlling which CAs are allowed to issue certificates for their properties. It builds on top of DNS and relies on a new resource record type.

The original form of CAA has been extended to satisfy two additional use cases. First, the CA/Browser Forum added the contactemail and contactphone extensions to enable policies to communicate contact information for those in charge of certificate issuance.

Read More

Subscribe to the Bulletproof TLS Newsletter

This subscription is just for the newsletter; we won't send you anything else.

Recent Issues


  • #97 Password Managers and PBKDF2 in the Spotlight 31 Jan 2023
  • #96 TrustCor Not Trusted 29 Dec 2022
  • #95 The Battle of QWACs Is in Full Swing 30 Nov 2022
  • #94 OpenSSL fixes buffer overflows in certificate parsing 1 Nov 2022
  • #93 In memory of Peter Eckersley 29 Sep 2022
  • #92 The end of SIDH and SIKE 31 Aug 2022
  • #91 NIST announces preliminary winners of post-quantum competition 28 Jul 2022
  • #90 Hertzbleed shows how CPU frequency scaling can lead to side-channel attacks 30 Jun 2022
  • #89 Certificate Transparency data is used to compromise WordPress before installation 31 May 2022
  • #88 Two zeros bypass Java’s ECDSA signature check 28 Apr 2022
  • #87 Russia creates certificate authority in response to sanctions 31 Mar 2022
Complete Archive

Designed by Ivan Ristić, the author of SSL Labs, Bulletproof TLS and PKI, and Hardenize, our course covers everything you need to know to deploy secure servers and encrypted web applications.

Remote and trainer-led, with small classes and a choice of timezones.

Join over 1,500 students who have benefited from more than a decade of deep TLS and PKI expertise.

Find out More

THE FINEST IN TLS
AND PKI EDUCATION
@feistyduck

Books

  • Bulletproof TLS and PKI
  • ModSecurity Handbook
  • OpenSSL Cookbook

Training

  • Practical TLS and PKI

Resources

  • Bulletproof TLS Newsletter
  • SSL/TLS and PKI History
  • Archived Books
  • Bulletproof TLS Guide

Company

  • Support
  • Website Terms of Use
  • Terms and Conditions
  • Privacy Policy
  • About Us