// REFERENCE
CAA record
Type number: 257
Declares which certificate authorities may issue TLS certificates for your domain. It reduces the risk of fraudulent issuance. It's one of the Posture scanner's checks.
Related tools
Work with this in:
Related
dnskey
DNSKEY record ds
DS record rrsig
RRSIG record nsec
NSEC record nsec3
NSEC3 record tlsa
TLSA record (DANE)
DNSKEY record ds
DS record rrsig
RRSIG record nsec
NSEC record nsec3
NSEC3 record tlsa
TLSA record (DANE)
Types per the IANA DNS parameters registry and their RFCs. Educational content.