Add a CAA record for the domain #127

New issue

Open

opened 2026-08-17 17:49:57 -04:00 by mysticalsoap · 0 comments

mysticalsoap commented

2026-08-17 17:49:57 -04:00

Owner

No CAA record on the domain. One registrar-side record (0 issue "letsencrypt.org", plus issuewild same) means no other CA will issue for *.mysticalsoap.com even if DNS credentials or the registrar account are attacked through some other CA's validation. Five minutes at the registrar, no moving parts, nothing in this repo to change. Verify afterwards with dig CAA mysticalsoap.com.

While in the registrar panel: check whether DNSSEC is available for the domain and weigh enabling it (AdGuard upstream and split-horizon are unaffected either way).

No CAA record on the domain. One registrar-side record (`0 issue "letsencrypt.org"`, plus `issuewild` same) means no other CA will issue for `*.mysticalsoap.com` even if DNS credentials or the registrar account are attacked through some other CA's validation. Five minutes at the registrar, no moving parts, nothing in this repo to change. Verify afterwards with `dig CAA mysticalsoap.com`. While in the registrar panel: check whether DNSSEC is available for the domain and weigh enabling it (AdGuard upstream and split-horizon are unaffected either way).

mysticalsoap added the

general-admin

label

2026-08-17 17:49:57 -04:00

mysticalsoap referenced this issue

2026-08-17 17:50:17 -04:00

Stack analysis: feature gaps and divergence from other homelabs #116