From: Ian Dees <ian.dees@gmail.com>
Date: Wed, 19 Aug 2020 01:26:27 +0000 (-0500)
Subject: Add globalsign.com to CAA list
X-Git-Url: https://git.openstreetmap.org./dns.git/commitdiff_plain/6684aef9624e1babdf34811c3dc3950a4f9dd42c?hp=1a118f467b2a5932c1dce43bdf2fbe9166e7e232

Add globalsign.com to CAA list
---

diff --git a/src/openstreetmap.js b/src/openstreetmap.js
index 713d0d1..57006d6 100644
--- a/src/openstreetmap.js
+++ b/src/openstreetmap.js
@@ -1,9 +1,11 @@
 D(DOMAIN, REGISTRAR, DnsProvider(PROVIDER),
 
-  // Publish CAA records indicating that only letsencrypt should issue certificates
+  // Publish CAA records indicating that only letsencrypt and globalsign (Fastly) should issue certificates
 
   CAA("@", "issue", "letsencrypt.org", CF_TTL_ANY),
   CAA("@", "issuewild", "letsencrypt.org", CF_TTL_ANY),
+  CAA("@", "issue", "globalsign.com", CF_TTL_ANY),
+  CAA("@", "issuewild", "globalsign.com", CF_TTL_ANY),
   CAA("@", "iodef", "mailto:hostmaster@openstreetmap.org"),
 
   // Use shenron as the MX host