--- title: "ACME CAA Extensions to Become Mandatory" url: https://daily.dev/posts/acme-caa-extensions-to-become-mandatory-8qqyqtfbt source_url: https://www.feistyduck.com/newsletter/issue_137_acme_caa__extensions_to_become_mandatory type: article source: "Feisty Duck" published: 2026-05-28T14:04:33.145Z updated: 2026-05-28T14:04:52.415Z reading_time: 5 upvotes: 0 comments: 0 language: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # ACME CAA Extensions to Become Mandatory **[Feisty Duck](https://daily.dev/sources/feistyduck)** · 5 min read · 0 upvotes · 0 comments ## Summary The CA/Browser Forum has voted (Ballot SC-098v2) to make ACME CAA extensions mandatory for all Certificate Authorities starting March 2027. ACME CAA extensions, defined in RFC 8657, allow domain owners to lock certificate issuance to a specific ACME account and restrict validation to DNS-based methods only. When combined with DNSSEC (already mandatory for domain validation since March 2026), this closes the remaining security gaps in Web PKI by ensuring all domain validation is cryptographically secure. CAs like Let's Encrypt and Google Trust Services already support the feature, and Chrome's Root Program Policy has required ACME CAA support since February 2026. The change enables high-assurance certificate issuance for high-profile websites that face serious threats. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [Cert Authorities Check for DNSSEC From Today](https://daily.dev/posts/cert-authorities-check-for-dnssec-from-today-eznwdfeb9) · Hacker News · 0 upvotes · 0 comments - [DNSSEC Validation for SSL Certificates: CA/B Forum Ballot SC-085 Changes in March 2026](https://daily.dev/posts/dnssec-validation-for-ssl-certificates-ca-b-forum-ballot-sc-085-changes-in-march-2026-r1t6gyhzl) · Security Boulevard · 0 upvotes · 0 comments --- [View this post on daily.dev](https://daily.dev/posts/acme-caa-extensions-to-become-mandatory-8qqyqtfbt)