CAA Builder

dnscontrol contains a CAA_BUILDER which can be used to simply create CAA records for your domains. Instead of creating each CAA record individually, you can simply configure your report mail address, the authorized certificate authorities and the builder cares about the rest.


For example you can use:

  label: "@",
  iodef: "mailto:test@domain.tld",
  iodef_critical: true,
  issue: [
  issuewild: "none",

The parameters are:

CAA_BUILDER() returns multiple records (when configured as example above):