*.lisp: Add CAA records to discourage wrong CAs from issuing.

[zones] / binswood.lisp

diff --git a/binswood.lisp b/binswood.lisp
index 957273c4502522a03f8999a07e2d51c9fd130113..322929de3af482dd24f7b75f8a796bac58bc78db 100644 (file)
--- a/binswood.lisp
+++ b/binswood.lisp
@@ -21,6 +21,10 @@ (defzone binswood.org.uk
        (mythic-beasts-2.ns :ip mythic-ns2)
        (mythic-beasts-3.ns :ip mythic-ns3))
 
+  ;; Certification.
+  :caa ((:issue "letsencrypt.org")
+       (:issue "distorted.org.uk"))
+
   ;; Internal hosts.
   (binswrt :a binswrt.binswood)
   (mango :a mango.binswood)