https://blog.qualys.com/ssllabs/2017/03/13/caa-mandated-by-cabrowser-forum it seems like this should be more popular ah, nice, in particular in combination with certificate transparency, so third parties can actually check whether CAs follow CAA (just having rules that noone checks hasn't been that successful a strategy with CAs in the past ;-) yeah FYI, I don't know f you've moved my /48 yet or what's up, but I'm seeing sporadic packet loss. mtr incoming... http://pastebitch.com/VKGh Reverse direction http://pastebitch.com/AMAE Wow that was significantly worse What on Earth? How am I getting 25% loss INSIDE ARP? TO MY FIRST HOP?! brycec: ntp amplification attack i think it should be better now multiple incoming transits converging Thanks mercutio yeah it cleraed-up while I was out