Our features site is undergoing a refresh! Be sure to explore the revamped site and discover our latest product roadmap launching here on Monday, March 18th.

Additional DNS record (RR) types (specifically CERT, OPENPGP, SMIMEA, TLSA and URI)

Richard Bairwell shared this idea 14 months ago
Needs Review

As a System Administrator, I would like additional DNS record RR types to be added to the WHM/Cpanel interfaces so that new records can be added for additional functionality.

At the moment, it is not possible to add the following DNS record types (I haven't checked all of them, just the ones I'm interested in):

CERT

  • Record type 37
  • Defined in: RFC 4398 'Proposed Standard'
  • Purpose: Allows certificates to be published (including PGP, X.509/S/MIME and IPSec). Has 4 fields (type, key tag, algorithm, certificate).
  • Example:
    myname.example.com IN CERT PGP 0 0 mDMEYo0B+RYJ....
  • Listed by Cpanel/Net/DNS/ZoneFile/LDNS: Yes
  • Listed by Cpanel/ZoneFile: No
  • Entry in: 3rdparty...Net/RR: Yes


OPENPGPKEY

  • Record type 61,
  • Defined in: RFC 7929 'Experimental'
  • Purpose: Allows OpenPGP keys to be published. (See also Weberblog.net). Suggested for use for .well-known/security.txt in RFC9116.
  • Example:
    39[..]d6._openpgpkey.example.com. IN OPENPGPKEY 1d4b....
  • Listed by Cpanel/Net/DNS/ZoneFile/LDNS: Yes
  • Listed by Cpanel/ZoneFile: No
  • Entry in: 3rdparty...Net/RR: Yes

SMIMEA

  • Record type 53
  • Defined in: RFC 8162 'Experimental'
  • Purpose: Associates an S/MIME certificate with a domain name
  • Example:
    39[..]d6._smimecert.example.com. IN SMIMEA 1d4b....
  • Listed by Cpanel/Net/DNS/ZoneFile/LDNS: Yes
  • Listed by Cpanel/ZoneFile: No
  • Entry in: 3rdparty...Net/RR: Yes

Both OPENGPGKEY and SMIMEA:

These are similar in that the DNS label is the user's email address in UTF-8 format, in a SHA-256 hash and truncated to 28 octets - followed by either "_openpgp.

Leave a Comment
 
Attach a file