search

tuxis-ie / nsedit

DNS Editor working with PowerDNS's new API
GNU General Public License v2.0
199 stars 55 forks source link

Add support for CAA record #141

Closed wiza closed 7 years ago

wiza commented 7 years ago

Please add support for CAA record per RFC 6844, supported in powerdns 4.0.0.

https://doc.powerdns.com/md/types/

righter83 commented 7 years ago

DIFF index.php

136a137
>           <option value="CAA">CAA</option>
625a627
>                                       'CAA': 'CAA',
1200d1201
<
tuxis-ie commented 7 years ago

@righter83 That is too fast. What kind of value is in CAA ? Should it be quoted, treated like a TXT record?

righter83 commented 7 years ago

@tuxis-ie Now it's a new special record: https://sslmate.com/labs/caa/

It's not quoted, but it has quotes inside the record.value

example.com.    IN  CAA 0 issue "letsencrypt.org"
HLFH commented 7 years ago

Following this discussion, for Let's Encrypt, it is recommended to use CAA with Critical Flag enabled: https://community.letsencrypt.org/t/caa-setup-for-lets-encrypt/9893

example.com. CAA 128 issue "letsencrypt.org"

Since the WebUI NSEdit is the best PowerDNS API based editor, it would be great to support CAA RRs.