Home/Notes/CAA records: a field note from a hardware store

CAA records: a field note from a hardware store

20 May 2025

How a hardware store deals with CAA records — and what usually goes wrong.

Browser visits hardware-store.com Registrar domain owner Nameserver DNS records Host serves site CAA records a mailbox that still…

The problem: a mailbox that still points at the old host. This is where CAA records breaks for a hardware store.

We keep a playbook for CAA records. Step one is always the same: pull the live record with dig, compare it to what the admin panel shows, and fix the mismatch.

A friend of the owner at a hardware store had set up CAA records years ago. When we audited, the config still pointed at a server they stopped paying for in 2024.

We underestimated how long CAA records migration would take for a hardware store. The estimate was two hours; the reality was a full day because a mailbox that still points at the old host had never been documented.

Related work on this site follows the same principle: one job, a real inbox, no theatre. a hardware store did not need four analytics dashboards to know that Tuesdays are slow.

We rotate API keys for CAA records annually. a hardware store did not see the point until we showed them the access log: the old key had been used from an IP in a country nobody on their team has visited.

More notes

Related notes

Tell us what you need.

Write a few lines about your project. We reply within one working day, usually with questions and a rough estimate.

hello@digitalserved.com