@misc{rfc8659, series = {Request for Comments}, number = 8659, howpublished = {RFC 8659}, publisher = {RFC Editor}, doi = {10.17487/RFC8659}, url = {https://www.rfc-editor.org/info/rfc8659}, author = {Phillip Hallam-Baker and Rob Stradling and Jacob Hoffman-Andrews}, title = {{DNS Certification Authority Authorization (CAA) Resource Record}}, pagetotal = 17, year = 2019, month = nov, abstract = {The Certification Authority Authorization (CAA) DNS Resource Record allows a DNS domain name holder to specify one or more Certification Authorities (CAs) authorized to issue certificates for that domain name. CAA Resource Records allow a public CA to implement additional controls to reduce the risk of unintended certificate mis-issue. This document defines the syntax of the CAA record and rules for processing CAA records by CAs. This document obsoletes RFC 6844.}, }