when suggesting CAA records for a domain, suggest variants that bind to the account id and with validation methods used by mox

should prevent potential mitm attacks. especially when done close to the
machine itself (where a http/tls challenge is intercepted to get a valid
certificate), as seen on the internet last month.
This commit is contained in:
Mechiel Lukkien
2023-12-21 15:16:30 +01:00
parent ca97293cb2
commit db3fef4981
11 changed files with 123 additions and 28 deletions

View File

@ -914,7 +914,7 @@ const domainDNSRecords = async (d) => {
'DNS Records',
),
dom.h1('Required DNS records'),
dom('pre.literal', style({maxWidth: '70em'}), records.join('\n')),
dom('pre.literal', records.join('\n')),
dom.br(),
)
}