*.lisp: Add CAA records to discourage wrong CAs from issuing.

[zones] / binswood.lisp

diff --git a/binswood.lisp b/binswood.lisp
index 957273c..322929d 100644 (file)
--- a/binswood.lisp
+++ b/binswood.lisp
@@ -21,6 +21,10 @@
        (mythic-beasts-2.ns :ip mythic-ns2)
        (mythic-beasts-3.ns :ip mythic-ns3))
 
+  ;; Certification.
+  :caa ((:issue "letsencrypt.org")
+       (:issue "distorted.org.uk"))
+
   ;; Internal hosts.
   (binswrt :a binswrt.binswood)
   (mango :a mango.binswood)