The CAA records allow the CAs to better control the process of issuing certificates and to reduce the possibility of mis-issue certificates for the domain. It is strongly recommended to use the CAA records with DNSSEC. CAA record – everything you need to know!