CAA Resource record is used to specify which certificate authorities (CAs) are allowed to issue certificates for a domain. CAA Resource Records, the new requirement in SSL validation process, allow a Certification Authority to implement additional controls to reduce the risk of unintended certificate mis-issue.
The DNS CAA Resource Record look like this:
rvglobalsoft.com. CAA 0 issue "symantec.com"
CAA Record will relate to a brand who issued the certificates. Then publish the generated DNS records on your domain's DNS
|
SSL Brand |
Record Type |
Priority |
Value/Answer/Destination |
|
Symantec |
CAA |
0 |
symantec.com |
|
GeoTrust |
CAA |
0 |
geotrust.com |
|
Thawte |
CAA |
0 |
thawte.com |
|
RapidSSL |
CAA |
0 |
rapidssl.com |
Comments
0 comments
Article is closed for comments.