CA's obligation for TOS Security Consideration

vanbroup / acme-auto-discovery

A mechanism for ACME clients to discover ACME server settings from a domain's CAA DNS record

https://vanbroup.github.io/acme-auto-discovery/draft-vanbrouwershaven-acme-auto-discovery.html

Other

5 stars 3 forks source link

CA's obligation for TOS Security Consideration #12

Closed ounsworth closed 1 year ago

ounsworth commented 1 year ago

We could add to 8.4.1 something to the effect of:

CAs will typically provide documentation indicating how to configure a domain's CAA record for ACME auto-discovery. CAs are encouraged to note in alongside those instructions that doing so will be taken as implicit agreement to the Terms of Service, and also to include a direct link to those Terms of Service.

vanbroup commented 1 year ago

Add this in 4a75188