DNS Certification Authority Authorization (CAA) Resource Record
Metadata
- Publisher
- IETF
- Doc Type
- Standard
- Pages
- 18
- Abstract
- The Certification Authority Authorization (CAA) DNS Resource Record allows a DNS domain name holder to specify one or more Certification Authorities (CAs) authorized to issue certificates for that domain. CAA Resource Records allow a public Certification Authority to implement additional controls to reduce the risk of unintended certificate mis-issue. This document defines the syntax of the CAA record and rules for processing CAA records by certificate issuers. [STANDARDS-TRACK]
- Publication Date
- 2013-01-01
- Status Note
- Proposed Standard
- DOI
10.17487/RFC6844- Link
- https://doi.org/10.17487/RFC6844
- Author(s)
- Phillip Hallam-BakerRob Stradling
- Keyword(s)
- DNS, DNSSEC, PKIX
Latest version of IETF RFC 6844
Document Versions — IETF RFC 6844
-
▶ IETF RFC 6844 (2013-01-01)THIS DOC [SUPERSEDED] [LATEST VERSION]
Normative Reference(s)
- IETF RFC 1034 [Active*]
- IETF RFC 1035 [Active, Amended*]
- IETF RFC 2119 [Active*]
- IETF RFC 2181 [Active*]
- IETF RFC 4033 [Active*]
- IETF RFC 4034 [Active*]
- IETF RFC 4035 [Active*]
- IETF RFC 5070 [Superseded*]
- IETF RFC 5155 [Active*]
- IETF RFC 5226 [Superseded*]
- IETF RFC 5234 [Active, Amended*]
- IETF RFC 5280 [Active, Amended*]
- IETF RFC 6195 [Superseded*]
- IETF RFC 6546 [Active*]
- IETF RFC 6698 [Active*]
- T-REC-X.509.2008 — X.509 EXTERNAL
Bibliographic Reference(s)
- Hallam-Baker, P., Stradling, R., and B. Laurie, "DNS Certification Authority Authorization (CAA) Resource Record", Work in Progress, May 2011. EXTERNAL
- IETF RFC 3647 [Active*]
Source Data (JSON)
Full registry record with provenance metadata. Open directly: /api/doc/RFC6844.json
Superseded by:
RFC8659 NOT IN REGISTRY
Reference Tree
Explore all references and references to this document, as a navigable tree.
Open Reference TreeReference this Doc
Plain text (ISO 690 compliant)
Preview:
IETF RFC 6844, DNS Certification Authority Authorization (CAA) Resource Record. Available at https://doi.org/10.17487/RFC6844
Snippet:
IETF RFC 6844, DNS Certification Authority Authorization (CAA) Resource Record. Available at https://doi.org/10.17487/RFC6844
HTML (ISO 690 compliant)
Preview:
IETF RFC 6844, DNS Certification Authority Authorization (CAA) Resource Record. Available at https://doi.org/10.17487/RFC6844
Snippet:
<span class="citation"><cite>IETF RFC 6844</cite>, DNS Certification Authority Authorization (CAA) Resource Record. Available at <a href="https://doi.org/10.17487/RFC6844" target="_blank" rel="noopener">https://doi.org/10.17487/RFC6844</a></span>
SMPTE's HTML Pub
Preview:
IETF RFC 6844, DNS Certification Authority Authorization (CAA) Resource Record
doi: 10.17487/RFC6844
url: https://doi.org/10.17487/RFC6844
doi: 10.17487/RFC6844
url: https://doi.org/10.17487/RFC6844
Snippet:
<li> <cite id="bib-rfc6844">IETF RFC 6844</cite>, DNS Certification Authority Authorization (CAA) Resource Record <span class="doi">10.17487/RFC6844</span> </li>
Referenced By
- IETF RFC 7633 [Active*]
- IETF RFC 8555 [Active*]