Wow. Apparently they don't fully understand how their own custom domains work?<p>Medium custom domains depend on a CNAME, which aliases all record types. This means once the CNAME is in place, no separate CAA is needed -- Medium just needs to serve a CAA record on the CNAME target, and their customers would never have to worry about the CAA.