4.2.2.1.1 已翻譯 對應原文版本:2.3.0

授權憑證機構簽發憑證(CAA)之多視角簽發佐證

跳至原文

CAA Multi-Perspective Issuance Corroboration

Some methods relied upon for validating the Applicant’s ownership or control of the subject domain(s) (see Section 3.2.2.4) or IP address(es) (see Section 3.2.2.5) to be listed in a certificate require CAA records to be retrieved and processed from additional remote Network Perspectives before Certificate issuance (see Section 3.2.2.9). To corroborate the Primary Network Perspective, a remote Network Perspective’s CAA check response MUST be interpreted as permission to issue, regardless of whether the responses from both Perspectives are byte-for-byte identical. Additionally, a CA MAY consider the response from a remote Network Perspective as corroborating if one or both of the Perspectives experience an acceptable CAA record lookup failure, as defined in Section 4.2.2.1.

某些用於驗證申請者(Applicant)對憑證中所列主體網域名稱(subject domain(s))(參見第 3.2.2.4 節)或 IP 位址(IP Address)(參見第 3.2.2.5 節)之所有權或控管權的方法,要求在憑證簽發前,從其他的遠端網路視角(remote Network Perspective)取得並處理 CAA 紀錄(參見第 3.2.2.9 節)。為了佐證主要網路視角(Primary Network Perspective),遠端網路視角的 CAA 檢查結果應(MUST)被解釋為許可才能簽發,無論來自這兩個視角的回應結果是否每個位元組都相同。此外,若其中一個或兩個視角遇到第 4.2.2.1 節所定義的可接受 CAA 紀錄檢查失敗,CA 得(MAY)將來自遠端網路視角的回應視為有效佐證。