Questions tagged [caa-record]

Questions regarding DNS Certification Authority Authorization records.

Filter by
Sorted by
Tagged with
8
votes
1answer
1k views

Is it possible to use a TXT record for CAA (Certification Authority Authorization)

My domain name provider doesn't allow CAA records in their DNS editor for some reason. When I mailed them about it they said I could just use a TXT record instead. After a good hour of Googling this ...
3
votes
1answer
468 views

What was happening in this Let's Encrypt CAA bug? [closed]

Recently, Let's Encrypt shared this bug that occured in their systems leading to certificate issues to their clients. They describe the bug this way: The bug: when a certificate request contained N ...
0
votes
1answer
208 views

CAA issuewild multi-level sub-sub-domains

CAA probably makes sure that issued certificates come from my CA and not from another one. Given in the DNS: example.com. 300 IN CAA 0 issue "ca.example.com" example.com. 300 IN CAA 0 issuewild "ca....
1
vote
1answer
337 views

Less restrictive CAA record for subdomain

I have a root domain I have control of and a set of subdomains, but other people are responsible for them. I want to add a CAA protection to my root domain, but I don't want to restrict the subdomain ...
0
votes
1answer
720 views

How to add CAA records, in PowerAdmin(PowerDNS) for ssl certificates in letsencrypt?

I am trying to add ssl certificates for a secure connection https for the domain and subdomains, but the problem I get is the following: DNS problem: SERVFAIL looking up CAA for DOMAIN DNS problem: ...
0
votes
1answer
343 views

HTTPS GitHub Pages DNS to Enforce SSL

On May 1, 2018, GitHub announced that GitHub Pages now gain support for HTTPS. It states that you're all set for this feature if you use CNAME or ALIAS records; or, updated DNS with new IP addresses ...
2
votes
2answers
611 views

Cannot create a CAA record in Azure DNS

CAA records were introduced to Azure DNS in November 2017. Today, I attempted to add one to a new DNS zone I created in US East 2. I used the cloud Powershell so I wouldn't have to wrestle with ...
6
votes
1answer
507 views

Where should CAA issuer IDs be obtained from and how should they be validated?

The Certificate Authority Authorization (CAA) DNS record type includes an issue parameter (also issuewild) that designates an identifier for a Certificate Authority allowed to issue certificates for ...
5
votes
1answer
4k views

CAA and CNAME together

My DNS supplier does not allow me to create a CAA record for a hostname that already has a CNAME record defined. I understand that the specifications don't allow for other record types when CNAME is ...