RFC 8659: DNS Certification Authority Authorization (CAA) Resource Record

The Certification Authority Authorization (CAA) DNS Resource Record allows a DNS domain name holder to specify one or more Certification Authorities (CAs)…

Read RFC 8659 on the RFC Editor

Outgoing relationships (8 related RFCs)

Obsoletes, Normative reference — RFC 6844: DNS Certification Authority Authorization (CAA) Resource Record
Normative reference — RFC 2119: Key words for use in RFCs to Indicate Requirement Levels
Normative reference — RFC 8174: Ambiguity of Uppercase vs Lowercase in RFC 2119 Key Words
Normative reference — RFC 5280: Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile
Normative reference — RFC 4033: DNS Security Introduction and Requirements
Normative reference — RFC 2181: Clarifications to the DNS Specification
Normative reference — RFC 6698: The DNS-Based Authentication of Named Entities (DANE) Transport Layer Security (TLS) Protocol: TLSA
Normative reference — RFC 5155: DNS Security (DNSSEC) Hashed Authenticated Denial of Existence

Incoming relationships (3 related RFCs)

Normatively referenced by — RFC 9495: Certification Authority Authorization (CAA) Processing for Email Addresses
Normatively referenced by — RFC 9799: Automated Certificate Management Environment (ACME) Extensions for ".onion" Special-Use Domain Names
Informatively referenced by — RFC 9115: An Automatic Certificate Management Environment (ACME) Profile for Generating Delegated Certificates