Search RFCs

RFC Editor

File formats:

Also available:XML file for editing

 

Status:

PROPOSED STANDARD

Obsoletes:

RFC 6844

Authors:

P. Hallam-Baker
R. Stradling
J. Hoffman-Andrews

Stream:

IETF

Source:

lamps (sec)

Cite this RFC:TXT  | XML  |  BibTeX

DOI:  https://doi.org/10.17487/RFC8659

Discuss this RFC: Send questions or comments to the mailing listspasm@ietf.org

Other actions:View Errata  | Submit Errata  | Find IPR Disclosures from the IETF  | View History of RFC 8659

Abstract

The Certification Authority Authorization (CAA) DNS Resource Recordallows a DNS domain name holder to specify one or more CertificationAuthorities (CAs) authorized to issue certificates for that domainname. CAA Resource Records allow a public CA to implement additionalcontrols to reduce the risk of unintended certificate mis-issue. This document defines the syntax of the CAA record and rules forprocessing CAA records by CAs.

This document obsoletes RFC 6844.

For the definition ofStatus,seeRFC 2026.

For the definition ofStream, seeRFC 8729.