Create CAA record on a free plan? (pointed to as CNAME)
I've red following information at https://sslmate.com/caa/about:
"If a domain name is a CNAME (also known as an alias) for another domain, then the certificate authority looks for the CAA record set at the CNAME target (just like any other DNS lookup). If no CAA record set is found, the certificate authority continues searching parent domains of the original domain name.
For example, if blog.example.com is a CNAME for blogprovider.example, then the certificate authority looks for CAA record sets in the following order:
- blogprovider.example
- example.com"
In my scenario my own pages app doesn't seem to specify any CAA records, which I find odd, I would have expected some to be present as mentioned at: https://developers.cloudflare.com/ssl/edge-certificates/caa-records/#caa-records-added-by-cloudflare:
"Cloudflare adds CAA records automatically in two situations:
When you have Universal SSL or advanced certificates and add any CAA records to your zone.
When you have Universal SSL enabled and enable AMP Real URL or SXG Signed Exchanges."
1) Isn't CF pages using universal SSL behind the scenes?
2) Is there a way for me to create CAA records on a free plan?
"If a domain name is a CNAME (also known as an alias) for another domain, then the certificate authority looks for the CAA record set at the CNAME target (just like any other DNS lookup). If no CAA record set is found, the certificate authority continues searching parent domains of the original domain name.
For example, if blog.example.com is a CNAME for blogprovider.example, then the certificate authority looks for CAA record sets in the following order:
- blogprovider.example
- example.com"
In my scenario my own pages app doesn't seem to specify any CAA records, which I find odd, I would have expected some to be present as mentioned at: https://developers.cloudflare.com/ssl/edge-certificates/caa-records/#caa-records-added-by-cloudflare:
"Cloudflare adds CAA records automatically in two situations:
When you have Universal SSL or advanced certificates and add any CAA records to your zone.
When you have Universal SSL enabled and enable AMP Real URL or SXG Signed Exchanges."
1) Isn't CF pages using universal SSL behind the scenes?
2) Is there a way for me to create CAA records on a free plan?
Welcome to the official Cloudflare Developers server. Here you can ask for help and stay updated with the latest news
85,042Members
Resources
Similar Threads
Was this page helpful?
