CAA record with accounturi?

How can I set accounturi on my CAA records?

In the name of security, it won’t be a thing I’m proud of saying though, - but …

When you’re using Universal SSL, Universal SSL will automatically make sure that Cloudflare’s edge can issue certificates on behalf of your domain, and the way that is done, is by forcing the CAA records to include:

example.com.            3600    IN      CAA     0 issuewild "letsencrypt.org"
example.com.            3600    IN      CAA     0 issue "letsencrypt.org"

As such, any attempts in limiting specific accounts to be able to issue certificates on behalf of your domain, using accounturi, will (at the time of writing this), be useless, if you also require Universal SSL.

1 Like

This topic was automatically closed 15 days after the last reply. New replies are no longer allowed.