If a domain is connected by pointing is it possible for the CNAME to provide the CAA response required by lets encrypt, or can this response only be provided by the controlling NameServers?

Thanks for any help a bit stuck on this.

I reviewed the article https://letsencrypt.org/docs/caa/

However, Its unclear what it querys for these records, are the provided by the NS, if such for a pointed domain the host they are pointed to would not be able to provide this record.


From the documentation at Let's Encrypt which is one of the first hits when searching for "CAA CNAME":

CAA validation follows CNAMEs, like all other DNS requests.

  • Okay so my understand than is this responsibility for a pointed domain, would be the host its pointed to not the NS provider. However, I understand at some point it will query the NS for this record. Thank you for your response. – Jhd33 Sep 25 '17 at 10:14

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.