IETF RFC 8659
DNS Certification Authority Authorization (CAA) Resource Record
active, Most Current
Buy Now
| Organization: | IETF |
| Publication Date: | 1 November 2019 |
| Status: | active |
| Page Count: | 17 |
scope:
Abstract
The Certification Authority Authorization (CAA) DNS Resource Record allows a DNS domain name holder to specify one or more Certification Authorities (CAs) authorized to issue certificates for that domain name. CAA Resource Records allow a public CA to implement additional controls to reduce the risk of unintended certificate mis-issue. This document defines the syntax of the CAA record and rules for processing CAA records by CAs.
This document obsoletes RFC 6844.
Document History
IETF RFC 8659
November 1, 2019
DNS Certification Authority Authorization (CAA) Resource Record
Abstract
The Certification Authority Authorization (CAA) DNS Resource Record allows a DNS domain name holder to specify one or more Certification Authorities (CAs) authorized to issue certificates...