ANSSI Reco-DNS §2.5
Publier un enregistrement CAA
UnveilScan findings mapped to this control
The scanner emits 1 distinct finding on this control. Click "Scan a domain" below to see which of them currently apply to your site, with copy-paste remediation snippets (nginx, Apache, DNS BIND, web-server config).
dns.no_caa
⏱ 10 min
DNS — No caa
Risk if ignored: Any CA can issue a certificate for your zone — a mis-issuance or internal CA compromise affects you even if you use a different CA.
security