CAA is a new DNS record that helps prevent unauthorized certificates for your domain. You, the domain owner, get to specify who can issue certificates. See how this can be useful for your website.