A Call to Reconsider Certification Authority Authorization
Research output: Contribution to journal › Research article › Contributed › peer-review
Contributors
Abstract
Certification Authority Authentication (CAA) is a safeguard against illegitimate certificate issuance. We show how shortcomings in CAA concepts and operational aspects undermine its effectiveness in preventing certificate misissuance. Our discussion reveals pitfalls and highlights best practices when designing security protocols based on the Domain Name System.
Details
| Original language | English |
|---|---|
| Pages (from-to) | 35-43 |
| Number of pages | 9 |
| Journal | IEEE Security & Privacy |
| Volume | 24 |
| Issue number | 1 |
| Publication status | Published - Feb 2026 |
| Peer-reviewed | Yes |
External IDs
| unpaywall | 10.1109/msec.2025.3531232 |
|---|---|
| Mendeley | 61fc8ff8-e648-382d-a9cc-29b3c456aed6 |
| ORCID | /0000-0002-3825-2807/work/179394058 |
| Scopus | 85217928580 |