電子郵件之網域驗證方法 - 部分例外

Email Domain Validation Methods - Partial Exception

For the e-mail-based Domain Validation methods described in sections 3.2.2.4.4, 3.2.2.4.13, and 3.2.2.4.14:

對於第 3.2.2.4.4 節、第 3.2.2.4.13 節與第 3.2.2.4.14 節內容所述之使用電子郵件（e-mail）為基礎的網域驗證方法：

• DNSSEC validation MUST be performed on all DNS CNAME, CAA, and TXT queries performed by the Primary Network Perspective used to obtain the Authorization Domain Name, and CAs MUST NOT use local policy to disable DNSSEC validation on those queries.
• For all other DNS queries associated with these methods performed by the Primary Network Perspective, DNSSEC validation SHOULD be performed and CAs SHOULD NOT use local policy to disable DNSSEC validation.

• 主要網路視角（Primary Network Perspective）為了取得經授權網域名稱（Authorization Domain Name，ADN）所執行的所有 DNS CNAME、CAA 與 TXT 查詢，應（MUST）執行 DNSSEC 驗證，且 CA 不得（MUST NOT）利用內部政策對該等查詢停用 DNSSEC 驗證。
• 對於主要網路視角執行之與該等方法相關的所有其他 DNS 查詢，宜（SHOULD）執行 DNSSEC 驗證，且 CA 不宜（SHOULD NOT）利用內部政策停用 DNSSEC 驗證。