Add CAA record
Add the ability to add a CAA record! This is now becoming more important with Qualys flagging it as a "requirement".
We just announced this feature for Azure DNS. Thanks to all who voted for this feature.
You may find this help doc to add CAA Record to Azure DNS
Larry Silverman commented
Today I tried adding CAA records to a newly created Azure DNS zone in US East 2 using the portal Shell. The adding of the record seems to work, and I can pull back the CAA records using Get-AzureRmDnsRecordSet. However, directly querying my assigned nameservers using dig does NOT return the CAA records. I've used the same dig command to fetch the CAA records on my live domains, and I'm sure the syntax works. I've waited several minutes for DNS propagation, but I'm just not seeing the CAA records. I also cannot see them in the portal.
Thanks for all the votes. This feature is actively being worked on and will be announced soon. Stay tuned.
Boris Bahes commented
I'm shocked Microsoft Azure does not support things like CAA or DNSSEC...this is natural on any open source platform....today we purchased Azure subscription in order to switch from current Linux DNS provider. Now I'm holding back. Do you have any ETA at least on CAA?
Chris Benner commented
It's also important for all Windows Server versions from Windows Server 2012 upto 2016.
When it will be available?
[Deleted User] commented
CAA record check is now mandatory for every CA. Do we have an ETA? I don't want to move more than 25 zones out of Azure...
A little troll-y, but still a worthwhile note: AWS launched this yesterday. https://aws.amazon.com/about-aws/whats-new/2017/08/amazon-route-53-now-supports-caa-records/
[Deleted User] commented
This is an stopper for a couple of projects we have. Is there any ***, considering that starting next month will be a requirement for all CAs to verify CAA records before issuing a certificate?
Thanks in advance,
**********************************************: Server Infrastructure | MCSE: SharePoint
MCSE: Cloud Platform and Infrastructure | MCSE: Productivity
Allen Derusha commented
The CA Browser forum has mandated CAA for issuing CAs starting September 1  . Can we get some sense of when MS intends to address this?
Lain Robertson commented
This is just as important as SenderID/SPF is to e-mail, if not more in the longer term. It needs to be across on-premise and cloud services.
Gabor Meszaros commented
Jason Blackwell commented
Leonard Lotz commented