Home/Notes/CAA records for a plumber

CAA records for a plumber

3 Aug 2026

How a plumber deals with CAA records — and what usually goes wrong.

Browser visits plumber.com Registrar domain owner Nameserver DNS records Host serves site CAA records nameservers that…

The problem: nameservers that still list a freelancer. This is where CAA records breaks for a plumber.

We moved CAA records for a plumber to a provider that supports DNSSEC. It added five minutes to the migration and closed a class of attacks they did not even know about.

Most of the damage we see in CAA records comes from doing too much. A single correct record beats three that were supposed to be clever.

Big agencies solve CAA records with a team. We solve it with a checklist and a dig command. The result is the same; the invoice is shorter.

We document CAA records in a shared spreadsheet. It is not glamorous, but a plumber can open it on their phone at midnight if something breaks.

The job started when a plumber realised their CAA records had been wrong for months. Nobody noticed because the site still loaded.

The vendor portal had silently rotated the key for CAA records, but a plumber was still using the old one. Every outbound message bounced quietly.

More notes

Related notes

Tell us what you need.

Write a few lines about your project. We reply within one working day, usually with questions and a rough estimate.

hello@digitalserved.com