CAA DNS record checking now mandatory


#1

Now that CAA checking is mandatory by CA’s can we add this to the list of DNS records generated by mailinabox?

References:
https://tools.ietf.org/html/rfc6844


#2

This would be nice to have. I think we can only generate them ourselves if we request them via letsencrypt, otherwise we would have to guess from the full chain what to populate the CAA record with.


#3

Makes sense. Probably worth creating an issue on github so it can be tracked.


#4

Thanks for the tip.

Created:


#5

I created a PR that allows you to manually add these records.


#6

This was merged into master. https://github.com/mail-in-a-box/mailinabox/issues/1155


#7

This topic was automatically closed after 61 days. New replies are no longer allowed.