Skip to content

Commit

Permalink
Add context for "determinations"
Browse files Browse the repository at this point in the history
  • Loading branch information
ryancdickson authored Oct 30, 2023
1 parent cb88b7d commit 0144a4c
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion docs/BR.md
Original file line number Diff line number Diff line change
Expand Up @@ -1045,7 +1045,7 @@ CAs MUST document potential issuances that were prevented by a CAA record in suf

#### 3.2.2.9 Multi-Perspective Issuance Corroboration

Multi-Perspective Issuance Corroboration attempts to corroborate the determinations made by the Primary Network Perspective from multiple additional Network Perspectives before Certificate issuance. This process can improve protection against equally-specific prefix Border Gateway Protocol (BGP) attacks or hijacks.
Multi-Perspective Issuance Corroboration attempts to corroborate the determinations (i.e., domain validation pass/fail, CAA permission/prohibition) made by the Primary Network Perspective from multiple additional Network Perspectives before Certificate issuance. This process can improve protection against equally-specific prefix Border Gateway Protocol (BGP) attacks or hijacks.

The response returned from each corroborating Network Perspective MUST allow the CA to verify:
- a. the presence of the expected 1) Random Value, 2) Request Token, 3) IP Address, or 4) Contact Address, as required by the relied upon validation method specified in Sections 3.2.2.4 and 3.2.2.5; and
Expand Down

0 comments on commit 0144a4c

Please sign in to comment.