Comment by jeroenhd

CAA is only verified by CAs. A malicious CA can ignore CAA records.