RFC8659 — DNS Certification Authority Authorization (CAA) Resource Record
RFC8659: DNS Certification Authority Authorization (CAA) Resource Record
IETF Request for Comments
| Status | PROPOSED STANDARD |
| Publication status | PROPOSED STANDARD |
| Published | November 2019 |
| Stream | IETF |
| Obsoletes | RFC6844 |
| Obsoleted by | — |
| Updated by | — |
Abstract
The Certification Authority Authorization (CAA) DNS Resource Record allows a DNS domain name holder to specify one or more Certification Authorities (CAs) authorized to issue certificates for that domain name. CAA Resource Records allow a public CA to implement additional controls to reduce the risk of unintended certificate mis-issue. This document defines the syntax of the CAA record and rules for processing CAA records by CAs. This document obsoletes RFC 6844.
Official sources
- Info page: https://www.rfc-editor.org/info/rfc8659
- Full text: https://www.rfc-editor.org/rfc/rfc8659.txt
- HTML: https://www.rfc-editor.org/rfc/rfc8659.html
Abstract and metadata are reproduced from the public RFC index; the full text is linked, not copied.
See all 29 pages under Internet standards (RFC) →
Related pages
Browse by topic
Every page in the corpus, grouped. Search finds one page; this shows what else is here.