FALKEN'S MAZE / CHECKS / CAA RECORD
CAA record
What Joshua checks
Checks for a CAA record limiting which authorities may issue certificates.
Why it matters
CAA blocks certificate authorities you do not use from issuing certificates for your domain.
How to fix it
Add a CAA record such as 0 issue "letsencrypt.org" for each authority you use.
In the Maze Score
- Worth
- 5 points (half for a warning)
- Severity
- Low
- Runs on
- Every scan, including the free report card
Related checks
- DNSSECFree
- Nameserver redundancyFree
- Domain registration expiryFree
How does your domain do? Scan it free and get a Maze Score in about a minute.