TopicIT Networking →
Simple definition
CAA indicates which certification authorities are authorized to issue a certificate for a domain.
Technical definition
Registration DNS Authority(3) certification includes properties such as exit, exitwild and iodinef.
What is it used for?
reduce the risk of unwanted issuance of TLS certificates.
Practical example
a domain can only allow the Encrypt or a specific commercial PKI.
Common issues
- CAA too restrictive
- Incorrect
- Unauthorised certification authority
Key takeaway: Always adapt the diagnosis to the product version and the architecture actually deployed.