Search RFCs

RFC Editor

File formats:

Status:

PROPOSED STANDARD

Obsoleted by:

RFC 8659

Authors:

P. Hallam-Baker
R. Stradling

Stream:

IETF

Source:

pkix (sec)

Cite this RFC:TXT  | XML  |  BibTeX

DOI:  https://doi.org/10.17487/RFC6844

Discuss this RFC: Send questions or comments to the mailing listpkix@ietf.org

Other actions:View Errata  | Submit Errata  | Find IPR Disclosures from the IETF  | View History of RFC 6844

Abstract

The Certification Authority Authorization (CAA) DNS Resource Recordallows a DNS domain name holder to specify one or more CertificationAuthorities (CAs) authorized to issue certificates for that domain.CAA Resource Records allow a public Certification Authority toimplement additional controls to reduce the risk of unintendedcertificate mis-issue. This document defines the syntax of the CAArecord and rules for processing CAA records by certificate issuers.[STANDARDS-TRACK]

For the definition ofStatus,seeRFC 2026.

For the definition ofStream, seeRFC 8729.