CAA wouldn't help in most cases! If you have an IP based delegation (A or AAAA record) you're probably okay, but if you have CNAME delegation you're beholden t

CAA wouldn't help in most cases! If you have an IP based delegation (A or AAAA record) you're probably okay, but if you have CNAME delegation you're beholden to the named entity. I've commented on this before on HN when CloudFlare did the same thing to me: https://news.ycombinator.com/item?id=16579486 https://news.ycombinator.com/item?id=16579486