Add CAA records

[dns.git] / src / openstreetmap

diff --git a/src/openstreetmap b/src/openstreetmap
index 952d4eb3846a96363a3089a446a193f1d8eb8bf6..bab02283c635b1c21f468b1f755ad2bcd94379cb 100644 (file)
--- a/src/openstreetmap
+++ b/src/openstreetmap
@@ -11,6 +11,10 @@ Zopenstreetmap:a.ns.bytemark.co.uk:hostmaster.openstreetmap.org:::::300
 .openstreetmap::b.ns.bytemark.co.uk
 .openstreetmap::c.ns.bytemark.co.uk
 
+# Publish a CAA record indicating that only letsencrypt should issue certificates
+
+:openstreetmap:257:\000\005\151\163\163\165\145\154\145\164\163\145\156\143\162\171\160\164\056\157\162\147
+
 # Make the virtual machine the primary MX with Bytemark as backup
 
 @openstreetmap:212.110.172.32:a:10
@@ -24,8 +28,8 @@ Zopenstreetmap:a.ns.bytemark.co.uk:hostmaster.openstreetmap.org:::::300
 
 'openstreetmap:v=spf1 ip4\07289.16.179.150 ip4\072212.110.172.32 ip6\0722001\07241c8\07210\072996\07221d\0727dff\072fec3\072df70 ip6\0722001\07241c9\0721\072400\072\07232 ~all
 
-# Add Google Postmaster Tools Verification
-# Grant
+# Google postmaster tools verification
+
 Caf323lytato5.openstreetmap:gv-o4v3qh5pfayqex.dv.googlehosted.com
 
 # Delegate geo.openstreetmap.org to PowerDNS