How to implement Letsencrypt SSL CAA DNS record

Ravinder-Sharma

How to set Letsencrypt SSL's CAA record in DNS.
I have read a lot on the internet but I have not understood anything special yet. We get A+ SSL from WordOps.
If this CAA record was known well then we could implement it.

I am giving some link below, here is some information about CAA Record.
1.) https://geekflare.com/dns-caa-record/
2.) https://gf.dev/dns-caa-lookup
3.) https://www.entrustdatacard.com/products/categories/ssl-certificates/caa-tool
4.) https://docs.digicert.com/manage-certificates/dns-caa-resource-record-check/
5.) https://thenewstack.io/heres-caa-dns-record-https-website/
6.) https://www.xolphin.com/support/Terminology/CAA_DNS_Records

Important:

Please read these above articles carefully because it is very important.
I am trying to implant the CAA record, I will tell you here if it is successful.
wordops.net has also implemented CAA records. I would request the admin to mention this in the guide line that installs wordops and also answer this question.

WordsOps CAA Record

Ravinder-Sharma

Almost websites do not have CAA records.

vasiler

You can use Cloudflare as DNS provider. Create a free Cloudflare account and add your domain. Change nameservers and wait the propagation. Then, add two new DNS records for your domain. Select CAA, at name type your domain and at CA domain name type digicert.com. At first CAA record select "only allows wildcards" and at last "only allows specific hostnames".

Ravinder-Sharma

Yes, it was completed with the help of Cloudflare. Thanks.

vasiler

Another thing you can do is enable HSTS if your site uses https. Use the command wo site update domain.tld --hsts (replace domain.tld) then submit your site to https://hstspreload.org/

L. E. I just saw in the other topic do you have already HSTS enabled. Just check https://hstspreload.org/