# CAA DNS Record

**URL:** <https://forums.interworx.com/t/caa-dns-record/14250>\
**Category:** News & Announcements\
**Tags:** dns, dns-template, caa\
**Created:** [February 11, 2018, 3:31am UTC](https://forums.interworx.com/t/caa-dns-record/14250 "2018-02-11T03:31:36Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![d2d4j](https://forums.interworx.com/user_avatar/forums.interworx.com/d2d4j/32/16_2.png) [@d2d4j](https://forums.interworx.com/u/d2d4j)\
**Post date:** [February 11, 2018, 3:31am UTC](https://forums.interworx.com/t/caa-dns-record/14250/1 "2018-02-11T03:31:36Z")

</div>

Hi  
I noticed there is a new DNS record which can be added (sorry, I am not sure how long it was present) called CAA  
This is for SSL DNS CA, so we are now using it and quallys test show its works lovely.  
We have our CAA set to Lets Encrypt, but if a client uses their own, you will need to amend or delete the CAA record accordingly.  
Further reading for CAA here

> **[CAA Mandated by CA/Browser Forum | Qualys Security Blog](https://blog.qualys.com/product-tech/2017/03/13/caa-mandated-by-cabrowser-forum)**
>
> Certification Authority Authorization (CAA), specified in RFC 6844 in 2013, is a proposal to improve the strength of the PKI ecosystem with a new control to restrict which CAs can issue certificates…

I hope that helps a little and kudos to Interwox  
Many thanks  
John

![quallys test result with caa.png](https://forums.interworx.com/uploads/default/original/1X/2d5c2eeadc122ea6d59d79131e2e0565e7eedd5d.png)

 ![caa dns.png](https://forums.interworx.com/uploads/default/original/1X/c66ab68980454cc58f7c3edd6e943994df3d8f57.png)