Oct 11, 2022

How to add DNS CAA record in a hosted DNS

Introduction

This article will provide the guidelines in adding a Certification Authority Authorization (CAA) record in a hosted DNS. If this is not the solution you are looking for, please search for your solution in the search bar above. Note: If you have any issues or questions whether CAA is supported with your setup, contact your DNS manager for further details. 

DNS Services which support DNS CAA records

Starting August 25, 2017, GlobalSign will be implementing the CAA Checking for SSL Certificates. As such, we have compiled a list of supported hosted DNS services as shown below: 

• Afraid.org Free DNS
• BIND
• BuddyNS
• Cloudflare (in beta)
• ClouDNS
• CloudXNS
• Constellix DNS
• core-networks.de
• Digital Ocean
• DNS Made Easy
• DNSimple
• Domeneshop (Domainnameshop)
• Dyn Managed DNS
• easyDNS
• Gandi
• Google Cloud DNS
• Google Domains DNS
• GratisDNS
• Hurricane Electric Free DNS
• INWX
• Linode
• Mythic Beasts
• Knot DNS
• Idns
• Neustar UltraDNS
• NS1
• NSD
• Nucleus NV
• OpenDNSSEC
• PowerDNS
• Route 53
• schokokeks.org
• Simple DNS Plus
• tinydns
• Vultr
• Windows Server 2016
• Zilore

Guidelines

DNS Services all have their own management interfaces and ways to add DNS CAA records. As such, you have to contact your DNS manager for details. However, we have listed the available guidelines below for your reference. 

DNSimple
Add, Update and Remove a DNS CAA record
https://support.dnsimple.com/articles/manage-caa-record/

Reference

1. Ballot 187 - Make CAA Checking Mandatory