Skip to content

LINODE: Accept CAA records with non-zero flags#4049

Merged
tlimoncelli merged 1 commit intoStackExchange:mainfrom
grahammiln:linode-caa-flags
Feb 3, 2026
Merged

LINODE: Accept CAA records with non-zero flags#4049
tlimoncelli merged 1 commit intoStackExchange:mainfrom
grahammiln:linode-caa-flags

Conversation

@grahammiln
Copy link
Copy Markdown
Contributor

@grahammiln grahammiln commented Feb 3, 2026

Allow domains with Certification Authority Authorization (CAA) records that have flags. Previously dnscontrol reported:

LINODE rejects domain example.com: caa flag is non-zero".

Linode does not, or no longer, rejects CAA records with non-zero flags. The flags are dropped by Linode but the CAA records are created.

In the example below, the flag iodef_critical is discarded by Linode. Otherwise the CAA records are populated as expected:

CAA_BUILDER({
  label: "@",
  iodef: "mailto:[email protected]",
  iodef_critical: true,
  issue: ["letsencrypt.org"],
  issuewild: "none",
})

Allow domains with Certification Authority Authorization (`CAA`) records
that have flags.

Previously `dnscontrol` reported "LINODE rejects domain example.com: caa
flag is non-zero". Linode does not, or no longer, rejects domains with
non-zero flags. Any flags are dropped by Linode but the `CAA` record is
created.

In the example below, the flag `iodef_critical` is discarded by Linode.
Otherwise the `CAA` records are populated as expected:

``` js
CAA_BUILDER({
  label: "@",
  iodef: "mailto:[email protected]",
  iodef_critical: true,
  issue: ["letsencrypt.org"],
  issuewild: "none",
})
```
@tlimoncelli tlimoncelli merged commit b8d1d55 into StackExchange:main Feb 3, 2026
0 of 2 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants