The upside of this is that now when I visit randomblog.com I won't have to worry if I'm about to be bombarded with mediums "down the app and subscribe" popups.
Wow. Apparently they don't fully understand how their own custom domains work?<p>Medium custom domains depend on a CNAME, which aliases all record types. This means once the CNAME is in place, no separate CAA is needed -- Medium just needs to serve a CAA record on the CNAME target, and their customers would never have to worry about the CAA.