As I said in the How to test CAA & iodef notification functionality thread, Let's Encrypt doesn't send iodef notifications if a CAA record blocks issuance. There have been a couple issues in Boulder discussing doing so ( #1248 , #2580 ), which seem to be closed as something that isn't likely to happen …

I don't think there are much support for iodef, since the standard said "CAs can send report to the iodef url". At least, AlphaSSL (Globalsign), Sectigo, Amazon and Let's Encrypt are not sending. I know nothing about other CAs because I'm too poor to afford their full price certificates :rofl:

What is current industry-standard support of CAA iodef?

Issuance Policy

system Closed May 19, 2021, 1:34am 6

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.

Topic		Replies	Views
If a CA send mail to CAA iodef, when it should? Issuance Policy	2	1227	December 8, 2021
CAA iodef support needed Feature Requests	19	1253	December 7, 2023
How to test CAA & iodef notification functionality Help	4	1866	May 18, 2021
RFC 8657 CAA extension in production Issuance Policy	2	1681	July 25, 2021
Cert Issuance to Russia Issuance Policy	7	1476	May 30, 2022

What is current industry-standard support of CAA iodef?

Related topics