A Call to Reconsider Certification Authority Authorization
Certification Authority Authentication (CAA) is a safeguard against illegitimate certificate issuance. We show how shortcomings in CAA concepts and operational aspects undermine its effectiveness in preventing certificate misissuance. Our discussion reveals pitfalls and highlights best practices when designing security protocols based on the Domain Name System.
Authors
- Thomas C. Schmidt (ORCID: https://orcid.org/0000-0002-0956-7885)
- Raphael Hiesgen (ORCID: https://orcid.org/0000-0002-1676-8108)
- Pouyan Fotouhi Tehrani (ORCID: https://orcid.org/0000-0002-3668-9335)
- Matthias Wählisch (ORCID: https://orcid.org/0000-0002-3825-2807)
Institutions
- Universität Hamburg (DE)
- HAW Hamburg (DE)
- Technische Universität Dresden (DE)
Publication Details
- Journal
- IEEE Security & Privacy
- Published
- 2025-02-12
- DOI
- https://doi.org/10.1109/msec.2025.3531232
- Primary Topic
- Library Science and Information Systems
- Type
- article
- Field-Weighted Citation Impact
- 0.00