Skip to content

Add support for resolving CAA records #19239

Closed
Closed
Add support for resolving CAA records#19239
Labels
dnsIssues and PRs related to the dns subsystem.

Description

@jfromaniello
jfromaniello
opened on Mar 8, 2018

This type of record is defined by rfc6844.

IANA has assigned Resource Record Type 257 for the CAA Resource
Record Type and added the line depicted below to the registry named
"Resource Record (RR) TYPEs" and QTYPEs as defined in BCP 42
[RFC6195] and located at
http://www.iana.org/assignments/dns-parameters.

  • Version: v8.6.0
  • Platform: all
  • Subsystem: dns
> dns.resolve('example.com', 'CAA', (err, recs) => console.log(recs))
Error: Unknown type "CAA"
    at Resolver.resolve (dns.js:316:11)
    at repl:1:5
    at ContextifyScript.Script.runInThisContext (vm.js:50:33)
    at REPLServer.defaultEval (repl.js:239:29)
    at bound (domain.js:301:14)
    at REPLServer.runBound [as eval] (domain.js:314:12)
    at REPLServer.onLine (repl.js:440:10)
    at emitOne (events.js:120:20)
    at REPLServer.emit (events.js:210:7)
    at REPLServer.Interface._onLine (readline.js:282:10)

Activity

  1. tniessen commented on Mar 8, 2018

    @tniessen
    tniessen
    on Mar 8, 2018
    Member

    Not sure whether c-ares supports CAA, probably something for #14713.

  2. tniessen
    added
    dnsIssues and PRs related to the dns subsystem.
    on Mar 8, 2018

  3. bnoordhuis commented on Mar 9, 2018

    @bnoordhuis
    bnoordhuis
    on Mar 9, 2018
    Member

    Not sure whether c-ares supports CAA

    It doesn't.

  4. bnoordhuis commented on Mar 13, 2018

    @bnoordhuis
    bnoordhuis
    on Mar 13, 2018
    Member

    Continues in #14713.

  5. bnoordhuis
    closed this as completedon Mar 13, 2018
  6. lxdicted
    added a commit that references this issue on Oct 2, 2020

    Added support for resolving DNS CAA records

    08d2e88
  7. aduh95
    added a commit that references this issue on Oct 16, 2020

    net: add support for resolving DNS CAA records

    6f34498
  8. targos
    added a commit that references this issue on May 1, 2021

    net: add support for resolving DNS CAA records

    fd08c37

  9. coolaj86 commented on Apr 29, 2022

    @coolaj86
    coolaj86
    on Apr 29, 2022

    Has this been implemented in the https module? Or is that still vulnerable?

    Must CAA checks must be done in a side channel / layered in a client library?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    dnsIssues and PRs related to the dns subsystem.

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions