Getting Started
Welcome to Good Roots Work
Section titled “Welcome to Good Roots Work”Good Roots Work provides free public tools for DNS security and certificate policy management. The site is operated by Cavalry Scout Pty Ltd.
Available today
Section titled “Available today”The CAA Policy Management tool lets you:
- Look up CAA records at a domain’s authoritative DNS zone
- Edit issue, issuewild, and iodef tags using known CA identifiers
- Compare your edited policy to live DNS and view manual BIND instructions
- Deploy changes through Domain Connect when your DNS provider supports it
No account is required.
Quick start
Section titled “Quick start”- Open the CAA Policy Management tool
- Enter a domain name and click Analyze Domain
- Add, remove, or adjust CAA entries in the policy editor
- Click Deploy (Domain Connect) or follow the manual DNS instructions
What is CAA?
Section titled “What is CAA?”Certificate Authority Authorization (CAA) is a DNS record type that specifies which Certificate Authorities may issue certificates for your domain. A well-formed CAA policy reduces the risk of mis-issuance.
Domain Connect
Section titled “Domain Connect”Good Roots Work is a Domain Connect service provider for template goodroots.work.caa_management. See the Domain Connect deploy guide for prerequisites and the authorization flow.
Getting help
Section titled “Getting help”Roadmap
Section titled “Roadmap”Certificate Transparency monitoring, tenant accounts, and alerting are part of our longer-term platform plan and are not required to use the public CAA tool today. CT and MCP documentation pages are marked coming soon.