We only recommend adding CAA records if you have the technical knowledge to do so.
We use a mix of Google Trust Services (pki.goog) and Let’s Encrypt (letsencrypt.org) for our SSL certificates, so it’s important to add both CAs to the allowlist.
SSL
CAA Record Setup
If you’re using CAA records for your domain, then you need to add the following records to your domain’s DNS settings:
Last modified on September 7, 2026