DNS Certification Authority Authorization (CAA) Resource Record

Metadata

Publisher: IETF
Doc Type: Standard
Pages: 17
Abstract: The Certification Authority Authorization (CAA) DNS Resource Record allows a DNS domain name holder to specify one or more Certification Authorities (CAs) authorized to issue certificates for that domain name. CAA Resource Records allow a public CA to implement additional controls to reduce the risk of unintended certificate mis-issue. This document defines the syntax of the CAA record and rules for processing CAA records by CAs. This document obsoletes RFC 6844.
Publication Date: 2019-11-01
Status Note: Proposed Standard
DOI: 10.17487/RFC8659
Link: https://doi.org/10.17487/RFC8659
Author(s): Phillip Hallam-Baker
Rob Stradling
Jacob Hoffman-Andrews
Keyword(s): Certification Authority, PKI

Latest version of IETF RFC 8659

Document Versions — IETF RFC 8659

▶ IETF RFC 8659 (2019-11-01)

THIS DOC [ACTIVE] [LATEST VERSION]

Normative Reference(s)

IETF RFC 1034 [Active*]
IETF RFC 1035 [Active, Amended*]
IETF RFC 2119 [Active*]
IETF RFC 2181 [Active*]
IETF RFC 4033 [Active*]
IETF RFC 4034 [Active*]
IETF RFC 4035 [Active*]
IETF RFC 5155 [Active*]
IETF RFC 5234 [Active, Amended*]
IETF RFC 5280 [Active, Amended*]
IETF RFC 6546 [Active*]
IETF RFC 6698 [Active*]
IETF RFC 6844 [Superseded*]
IETF RFC 7970 [Active*]
IETF RFC 8174 [Active*]

Bibliographic Reference(s)

IETF RFC 3647 [Active*]

Source Data (JSON)

Full registry record with provenance metadata. Open directly: /api/doc/RFC8659.json

Supersedes:

IETF RFC 6844 [Superseded*]

Reference Tree

Explore all references and references to this document, as a navigable tree.

Open Reference Tree

Reference this Doc

Plain text (ISO 690 compliant)

Preview:

IETF RFC 8659, DNS Certification Authority Authorization (CAA) Resource Record. Available at https://doi.org/10.17487/RFC8659

Snippet:

IETF RFC 8659, DNS Certification Authority Authorization (CAA) Resource Record. Available at https://doi.org/10.17487/RFC8659

HTML (ISO 690 compliant)

Preview:

IETF RFC 8659, DNS Certification Authority Authorization (CAA) Resource Record. Available at https://doi.org/10.17487/RFC8659

Snippet:

<span class="citation"><cite>IETF RFC 8659</cite>, DNS Certification Authority Authorization (CAA) Resource Record. Available at <a href="https://doi.org/10.17487/RFC8659" target="_blank" rel="noopener">https://doi.org/10.17487/RFC8659</a></span>

SMPTE's HTML Pub

Preview:

IETF RFC 8659, DNS Certification Authority Authorization (CAA) Resource Record
doi: 10.17487/RFC8659
url: https://doi.org/10.17487/RFC8659

Snippet:

<li>
<cite id="bib-rfc8659">IETF RFC 8659</cite>, DNS Certification Authority Authorization (CAA) Resource Record
<span class="doi">10.17487/RFC8659</span>
</li>