Certification Authority Authorization (CAA), specified in RFC 6844 in 2013, is a proposal to improve the strength of the PKI ecosystem with a new control to restrict which CAs can issue certificates for a particular domain name. Although CAA had been in the proposed-standard state for more than 4 years, there was little obvious happening until very recently, with only a hundred or two hundred site
![CAA Mandated by CA/Browser Forum | Qualys Security Blog](https://cdn-ak-scissors.b.st-hatena.com/image/square/8b772132067e016aae7336d9dd7d33df3f89f731/height=288;version=1;width=512/https%3A%2F%2Fik.imagekit.io%2Fqualys%2Fwp-content%2Fuploads%2F2024%2F05%2Fqblog-thumbnail.png)