I currently have a Let's Encrypt SSL certificate for my Debian server, and would like to implement CAA (Certification Authority Authorization, RFC 6844) on it.I'm a bit confused as to how to implement it however, as I don't seem to be able to add it to my zone file on my registrar's site. (gandi.net)Is it a file I add to the root of the web server, or do I have to wait until my registrar supports it?
How to add a CAA Record on Debian
dns;openssl;ssl
It's a DNS record. If your registrar doesn't support adding it, the only alternative would be to use a different DNS provider (or run your own DNS servers).