On Fri, Sep 22, 2017 at 12:12:20PM -0400, Bob Harold <rharolde at umich.edu> wrote a message of 99 lines which said: > Do the CA's lookup CAA records in .onion domains? But they cannot, .onion does not use the DNS and so has no CAA records.