DNS guide: leave CAA off by default and say why #162

Merged
jcoffey-dev merged 1 commits from fix/caa-default-off-292 into main 2026-11-05 05:54:43 +00:00
1 Commits
Author SHA1 Message Date
jcoffey-dev 661092e184 DNS guide: leave CAA off by default and say why
ci / build (pull_request) Skipped
ci / publish (pull_request) Skipped
ci / notices (pull_request) Successful in 1m3s
github/ci (branch) GitHub Actions
ci / github (pull_request) Successful in 1m49s
A CAA record covers every name under the domain and ties it to this server's
ACME account, so another ACME client there is refused at its next renewal.
The guide no longer switches it on by itself, and the switch now carries a
warning.

Part of inbuxa/inbuxa-server#292
2026-11-04 21:36:46 -07:00