Questions tagged [caa-record]

Questions regarding DNS Certification Authority Authorization records.

Filter by
Sorted by
Tagged with
8 votes
1 answer
2k views

Is it possible to use a TXT record for CAA (Certification Authority Authorization)

My domain name provider doesn't allow CAA records in their DNS editor for some reason. When I mailed them about it they said I could just use a TXT record instead. After a good hour of Googling this ...
user avatar
  • 1,088
3 votes
1 answer
506 views

What was happening in this Let's Encrypt CAA bug? [closed]

Recently, Let's Encrypt shared this bug that occured in their systems leading to certificate issues to their clients. They describe the bug this way: The bug: when a certificate request contained N ...
user avatar
0 votes
1 answer
389 views

CAA issuewild multi-level sub-sub-domains

CAA probably makes sure that issued certificates come from my CA and not from another one. Given in the DNS: example.com. 300 IN CAA 0 issue "ca.example.com" example.com. 300 IN CAA 0 issuewild "ca....
user avatar
  • 494
1 vote
1 answer
621 views

Less restrictive CAA record for subdomain

I have a root domain I have control of and a set of subdomains, but other people are responsible for them. I want to add a CAA protection to my root domain, but I don't want to restrict the subdomain ...
user avatar
  • 548
0 votes
1 answer
1k views

How to add CAA records, in PowerAdmin(PowerDNS) for ssl certificates in letsencrypt?

I am trying to add ssl certificates for a secure connection https for the domain and subdomains, but the problem I get is the following: DNS problem: SERVFAIL looking up CAA for DOMAIN DNS problem: ...
user avatar
  • 1
0 votes
2 answers
628 views

HTTPS GitHub Pages DNS to Enforce SSL

On May 1, 2018, GitHub announced that GitHub Pages now gain support for HTTPS. It states that you're all set for this feature if you use CNAME or ALIAS records; or, updated DNS with new IP addresses ...
user avatar
2 votes
2 answers
747 views

Cannot create a CAA record in Azure DNS

CAA records were introduced to Azure DNS in November 2017. Today, I attempted to add one to a new DNS zone I created in US East 2. I used the cloud Powershell so I wouldn't have to wrestle with ...
user avatar
6 votes
1 answer
579 views

Where should CAA issuer IDs be obtained from and how should they be validated?

The Certificate Authority Authorization (CAA) DNS record type includes an issue parameter (also issuewild) that designates an identifier for a Certificate Authority allowed to issue certificates for ...
user avatar
  • 2,988
6 votes
1 answer
5k views

CAA and CNAME together

My DNS supplier does not allow me to create a CAA record for a hostname that already has a CNAME record defined. I understand that the specifications don't allow for other record types when CNAME is ...
user avatar