CAA
Certification Authority Authorization (CAA)
DNS
PKIのX.509証明書発行の本人確認に使うレコード
発行できるCAを制限できるなど
RFC 8659 DNS Certification Authority Authorization (CAA) Resource Record
https://www.rfc-editor.org/info/rfc8659
https://tex2e.github.io/rfc-translater/html/rfc8659.html
RFC 6844 → 8659
DOI 10.17487/RFC6844
https://www.rfc-editor.org/info/rfc6844
https://jprs.jp/related-info/guide/topics-column/no24.html
似たもの?
RFC 6698 The DNS-Based Authentication of Named Entities (DANE) Transport Layer Security (TLS) Protocol: TLSA