CAA is a new mechanism that will allow site owners to specify which Certificate Authorities are authorised to issue certificates for their domain name. It’s a simple DNS record so setup is a breeze and SSL Labs is now checking for it, so it’s time to do it!