List of CAA Identifiers report update

[Chris Clements]

All,

The CCADB Steering Committee has updated the “List of CAA Identifiers” report hosted on https://www.ccadb.org/resources.

The updated version of the report offers a simpler mapping between issuing CAs and the set of corresponding CAA record values for which they are permitted to issue against, as disclosed to the CCADB.

The custom report and CSV export can be found on https://www.ccadb.org/resources and are identified with the [NEW] tag. Feedback is welcome!

Thank you
-Chris, on behalf of the CCADB Steering Committee

[Chris Clements]

All,

The CCADB Steering Committee plans to deprecate the old "List of CAA Identifiers" report, accessible at https://www.ccadb.org/resources (i.e., the one without the [NEW] tag), on May 15, 2025. This action will proceed unless a dependency requiring its continued availability is reported to us.

Thank you

-Chris, on behalf of the CCADB Steering Committee

[Hanno Böck]

On Thu, 1 May 2025 09:39:24 -0400
"'Chris Clements' via CCADB Public" <pub...@ccadb.org> wrote:

> The CCADB Steering Committee plans to deprecate the old "List of CAA
> Identifiers" report, accessible at https://www.ccadb.org/resources

> (i.e., the one *without* the [NEW] tag), on May 15, 2025. This action

> will proceed unless a dependency requiring its continued availability
> is reported to us.

I think this could be handled better.

Right now, looking at that page, I'd think that the now deprecated "List
of CAA Identifiers" is the one to use, and [NEW] is something
experimental.

I'd suggest:
Add something like [OBSOLETE] to the old one for some time, remove the
[NEW] from the other one to make it clear this is now the "normal" list.
Wait a bit before completely removing the old one to give people not
watching this mailing list a chance to notice the change.

--
Hanno Böck - Independent security researcher
https://itsec.hboeck.de/
https://badkeys.info/

[Chris Clements]

Thank you for the feedback, Hanno. We will proceed with your suggestion and wait a while longer before removing the old report.